RHSA-2026:72502
Vulnerability from csaf_redhat - Published: 2026-09-28 13:32 - Updated: 2026-09-29 00:17Summary
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
Severity
Important
Notes
Topic: cert-manager Operator for Red Hat OpenShift 1.20.1
Details: The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities
and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide
certificates-as-a-service to developers working within your Kubernetes cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the xmllint program distributed by the libxml2 package. A buffer over-read in the xmlHTMLPrintFileContext function in the xmllint.c file may be triggered when a crafted file is processed with the xmllint program using the `--htmlout` command line option, causing an application crash and resulting in a denial of service.
5.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
4.4 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
CWE-121 - Stack-based Buffer OverflowAffected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in libtasn1. A remote attacker could exploit a stack-based buffer overflow vulnerability in the `asn1_expend_octet_string` function. This occurs due to a failure in validating the size of input data. Successful exploitation can lead to a Denial of Service (DoS) condition, making the affected system or application unavailable.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
5.6 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass.
6.8 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access.
5.7 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
CWE-179 - Incorrect Behavior Order: Early ValidationAffected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.
4.0 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
6.7 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.
CWE-208 - Observable Timing DiscrepancyAffected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.
5.0 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.
5.0 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the `xmlParseInternalSubset` function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service (DoS), making the affected system or application unavailable.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.
5.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.
7.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.
7.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially allow the attacker to execute arbitrary code within the context of the xmlcatalog process.
4.8 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
6.2 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
7.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).
7.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.
5.0 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.
6.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman (ECDH) ciphertext to the `gcry_pk_decrypt` function. This can lead to a heap-based buffer overflow, potentially causing a denial of service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
7.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.
7.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.
6.6 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL's CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application's error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.
6.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.
9.1 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.
CWE-347 - Improper Verification of Cryptographic SignatureAffected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Low
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
7.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.
7.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.
6.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in the `attr` package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by `getfattr` or during backup restoration by `setfattr`, which reads and resolves full pathnames from backup files. In both cases, when these utilities are executed by a privileged process over a path controlled by the attacker, this can lead to local privilege escalation.
6.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
7.3 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Important
A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections.
5.4 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-34459
Threats
Impact
Moderate
References
476 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cert-manager Operator for Red Hat OpenShift 1.20.1",
"title": "Topic"
},
{
"category": "general",
"text": "The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities\nand certificates as first-class resource types in the Kubernetes API. This makes it possible to provide\ncertificates-as-a-service to developers working within your Kubernetes cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:72502",
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-34459",
"url": "https://access.redhat.com/security/cve/CVE-2024-34459"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13151",
"url": "https://access.redhat.com/security/cve/CVE-2025-13151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14087",
"url": "https://access.redhat.com/security/cve/CVE-2025-14087"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14512",
"url": "https://access.redhat.com/security/cve/CVE-2025-14512"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-6170",
"url": "https://access.redhat.com/security/cve/CVE-2025-6170"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11822",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11824",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11979",
"url": "https://access.redhat.com/security/cve/CVE-2026-11979"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13757",
"url": "https://access.redhat.com/security/cve/CVE-2026-13757"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14164",
"url": "https://access.redhat.com/security/cve/CVE-2026-14164"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15588",
"url": "https://access.redhat.com/security/cve/CVE-2026-15588"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16118",
"url": "https://access.redhat.com/security/cve/CVE-2026-16118"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1965",
"url": "https://access.redhat.com/security/cve/CVE-2026-1965"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2100",
"url": "https://access.redhat.com/security/cve/CVE-2026-2100"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28390",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29111",
"url": "https://access.redhat.com/security/cve/CVE-2026-29111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-31790",
"url": "https://access.redhat.com/security/cve/CVE-2026-31790"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33845",
"url": "https://access.redhat.com/security/cve/CVE-2026-33845"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33846",
"url": "https://access.redhat.com/security/cve/CVE-2026-33846"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34180",
"url": "https://access.redhat.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34181",
"url": "https://access.redhat.com/security/cve/CVE-2026-34181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34182",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34183",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3783",
"url": "https://access.redhat.com/security/cve/CVE-2026-3783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3832",
"url": "https://access.redhat.com/security/cve/CVE-2026-3832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3833",
"url": "https://access.redhat.com/security/cve/CVE-2026-3833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40355",
"url": "https://access.redhat.com/security/cve/CVE-2026-40355"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40356",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4046",
"url": "https://access.redhat.com/security/cve/CVE-2026-4046"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41989",
"url": "https://access.redhat.com/security/cve/CVE-2026-41989"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42009",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42010",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42011",
"url": "https://access.redhat.com/security/cve/CVE-2026-42011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42012",
"url": "https://access.redhat.com/security/cve/CVE-2026-42012"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42013",
"url": "https://access.redhat.com/security/cve/CVE-2026-42013"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42014",
"url": "https://access.redhat.com/security/cve/CVE-2026-42014"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42015",
"url": "https://access.redhat.com/security/cve/CVE-2026-42015"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42764",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42766",
"url": "https://access.redhat.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42767",
"url": "https://access.redhat.com/security/cve/CVE-2026-42767"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42768",
"url": "https://access.redhat.com/security/cve/CVE-2026-42768"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42769",
"url": "https://access.redhat.com/security/cve/CVE-2026-42769"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42770",
"url": "https://access.redhat.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4424",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4437",
"url": "https://access.redhat.com/security/cve/CVE-2026-4437"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4438",
"url": "https://access.redhat.com/security/cve/CVE-2026-4438"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45445",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45446",
"url": "https://access.redhat.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45447",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48864",
"url": "https://access.redhat.com/security/cve/CVE-2026-48864"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5121",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5260",
"url": "https://access.redhat.com/security/cve/CVE-2026-5260"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5419",
"url": "https://access.redhat.com/security/cve/CVE-2026-5419"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54370",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54371",
"url": "https://access.redhat.com/security/cve/CVE-2026-54371"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5450",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58010",
"url": "https://access.redhat.com/security/cve/CVE-2026-58010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58011",
"url": "https://access.redhat.com/security/cve/CVE-2026-58011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58012",
"url": "https://access.redhat.com/security/cve/CVE-2026-58012"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58013",
"url": "https://access.redhat.com/security/cve/CVE-2026-58013"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58014",
"url": "https://access.redhat.com/security/cve/CVE-2026-58014"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58015",
"url": "https://access.redhat.com/security/cve/CVE-2026-58015"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58016",
"url": "https://access.redhat.com/security/cve/CVE-2026-58016"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58055",
"url": "https://access.redhat.com/security/cve/CVE-2026-58055"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6238",
"url": "https://access.redhat.com/security/cve/CVE-2026-6238"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6653",
"url": "https://access.redhat.com/security/cve/CVE-2026-6653"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7383",
"url": "https://access.redhat.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-8286",
"url": "https://access.redhat.com/security/cve/CVE-2026-8286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9076",
"url": "https://access.redhat.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9547",
"url": "https://access.redhat.com/security/cve/CVE-2026-9547"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html",
"url": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72502.json"
}
],
"title": "Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1",
"tracking": {
"current_release_date": "2026-09-29T00:17:22+00:00",
"generator": {
"date": "2026-09-29T00:17:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:72502",
"initial_release_date": "2026-09-28T13:32:53+00:00",
"revision_history": [
{
"date": "2026-09-28T13:32:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-28T13:32:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-29T00:17:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cert Manager support for Red Hat OpenShift release 1.20",
"product": {
"name": "Cert Manager support for Red Hat OpenShift release 1.20",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.20",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cert_manager:1.20::el9"
}
}
}
],
"category": "product_family",
"name": "Cert Manager support for Red Hat OpenShift release"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"product_id": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cert-manager-trust-manager-rhel9@sha256%3A41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9\u0026tag=1790598593"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64",
"product_id": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cert-manager-trust-manager-rhel9@sha256%3Afe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9\u0026tag=1790598593"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"product_id": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cert-manager-trust-manager-rhel9@sha256%3A54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9\u0026tag=1790598593"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"product_id": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cert-manager-trust-manager-rhel9@sha256%3Af8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9\u0026tag=1790598593"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.20",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.20",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.20",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.20",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.20"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-34459",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2024-05-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2280532"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the xmllint program distributed by the libxml2 package. A buffer over-read in the xmlHTMLPrintFileContext function in the xmllint.c file may be triggered when a crafted file is processed with the xmllint program using the `--htmlout` command line option, causing an application crash and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue only affects the xmllint program when the `--htmlout\u0027 command line option is used. Additionally, an application is not vulnerable if it does not use or expose the xmllint program.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34459"
},
{
"category": "external",
"summary": "RHBZ#2280532",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280532"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720"
}
],
"release_date": "2024-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Do not process untrusted files with the xmllint program.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c"
},
{
"acknowledgments": [
{
"names": [
"Mohamed Maatallah"
]
}
],
"cve": "CVE-2025-5278",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-05-27T13:50:20.148000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2368764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "RHBZ#2368764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
},
{
"category": "external",
"summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
}
],
"release_date": "2025-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
},
{
"acknowledgments": [
{
"names": [
"Ahmed Lekssays"
]
}
],
"cve": "CVE-2025-6170",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-06-16T05:33:22.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2372952"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the severity of this vulnerability as Low, since it affects only the interactive shell mode of the xmllint tool and requires a user to manually run the tool and enter or receive specially crafted input. The exploitation requires local access and a highly specific usage scenario that is uncommon in typical environments. While it can cause a crash, the impact is limited to availability, and exploitation is unlikely in real-world deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-6170"
},
{
"category": "external",
"summary": "RHBZ#2372952",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372952"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941"
}
],
"release_date": "2025-06-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling"
},
{
"cve": "CVE-2025-13151",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-01-07T22:01:02.206250+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427698"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libtasn1. A remote attacker could exploit a stack-based buffer overflow vulnerability in the `asn1_expend_octet_string` function. This occurs due to a failure in validating the size of input data. Successful exploitation can lead to a Denial of Service (DoS) condition, making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Low for Red Hat products. A stack-based buffer overflow in the `libtasn1` library, specifically within the `asn1_expend_octet_string` function, can be triggered by failing to validate input data size. This could allow a remote, unauthenticated attacker to cause a denial of service in applications utilizing `libtasn1`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13151"
},
{
"category": "external",
"summary": "RHBZ#2427698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13151",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13151"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/libtasn1",
"url": "https://gitlab.com/gnutls/libtasn1"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/libtasn1/-/merge_requests/121",
"url": "https://gitlab.com/gnutls/libtasn1/-/merge_requests/121"
}
],
"release_date": "2026-01-07T21:14:05.223000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string"
},
{
"acknowledgments": [
{
"names": [
"Sovereign Tech Resilience program"
],
"organization": "Sovereign Tech Agency"
},
{
"names": [
"treeplus"
]
}
],
"cve": "CVE-2025-14087",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-12-05T08:35:24.744000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: GLib: Buffer underflow in GVariant parser leads to heap corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The highest threat is to system availability due to potential application crashes when processing maliciously crafted input strings through GLib\u0027s GVariant parser. This issue affects applications that utilize g_variant_parse() on untrusted data, leading to memory corruption and possible denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14087"
},
{
"category": "external",
"summary": "RHBZ#2419093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14087"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14087",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14087"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3834",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3834"
}
],
"release_date": "2025-12-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: GLib: Buffer underflow in GVariant parser leads to heap corruption"
},
{
"acknowledgments": [
{
"names": [
"Codean Labs"
]
}
],
"cve": "CVE-2025-14512",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-12-11T06:22:59.701000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2421339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib\u0027s GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products because an integer overflow in GLib\u0027s GIO `escape_byte_string()` function can lead to a heap buffer overflow and denial-of-service. This occurs when processing specially crafted file or remote filesystem attribute values, requiring an attacker to provide malicious input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14512"
},
{
"category": "external",
"summary": "RHBZ#2421339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2421339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14512",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14512"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3845",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3845"
}
],
"release_date": "2025-12-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow"
},
{
"cve": "CVE-2026-1965",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-03-11T11:00:54.752485+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1965"
},
{
"category": "external",
"summary": "RHBZ#2446448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1965"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-1965.html",
"url": "https://curl.se/docs/CVE-2026-1965.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-1965.json",
"url": "https://curl.se/docs/CVE-2026-1965.json"
}
],
"release_date": "2026-03-11T10:08:52.431000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication"
},
{
"acknowledgments": [
{
"names": [
"Zoltan Fridrich"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-2100",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-02-06T12:02:49.002000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437308"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to return an uninitialized value, potentially resulting in a NULL dereference or undefined behavior. This issue may cause an application level denial of service or other unpredictable system states.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact flaw in p11-kit allows a remote attacker to cause an application level denial of service or unpredictable system states. Exploitation occurs when the C_DeriveKey function is called on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This affects Red Hat Enterprise Linux 9.8 and 10.2, Fedora 42 and 43, and Red Hat In-Vehicle OS 2.0. Other Red Hat products, including OpenShift Container Platform and various RHEL versions, are not affected as the vulnerable code is not present.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2100"
},
{
"category": "external",
"summary": "RHBZ#2437308",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437308"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2100"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2100",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2100"
},
{
"category": "external",
"summary": "https://github.com/p11-glue/p11-kit/pull/740",
"url": "https://github.com/p11-glue/p11-kit/pull/740"
},
{
"category": "external",
"summary": "https://github.com/p11-glue/p11-kit/releases/tag/0.26.2",
"url": "https://github.com/p11-glue/p11-kit/releases/tag/0.26.2"
}
],
"release_date": "2026-02-06T08:08:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters"
},
{
"cve": "CVE-2026-3783",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-03-11T11:01:01.429907+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3783"
},
{
"category": "external",
"summary": "RHBZ#2446450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3783"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/03/11/2",
"url": "http://www.openwall.com/lists/oss-security/2026/03/11/2"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3783.html",
"url": "https://curl.se/docs/CVE-2026-3783.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3783.json",
"url": "https://curl.se/docs/CVE-2026-3783.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3583983",
"url": "https://hackerone.com/reports/3583983"
}
],
"release_date": "2026-03-11T10:09:08.746000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To prevent the leakage of OAuth2 bearer tokens, ensure that `.netrc` files are carefully managed. Avoid configuring `.netrc` entries for untrusted or unknown hostnames, particularly when `curl` is used with OAuth2 bearer tokens and is configured to follow redirects. Regularly review and restrict the scope of credentials stored in `.netrc` files to only explicitly trusted destinations.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect"
},
{
"cve": "CVE-2026-3832",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2026-03-09T13:41:32.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue has a LOW impact. A flaw in gnutls\u0027 OCSP stapling implementation allows a client with OCSP verification enabled to accept a revoked server certificate. This occurs when a multi-record OCSP response is stapled, and the client incorrectly reads the certificate status from an unrelated record, leading to an order-dependent acceptance of a revoked certificate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3832"
},
{
"category": "external",
"summary": "RHBZ#2445762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3832"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1801",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1801"
}
],
"release_date": "2026-04-30T17:29:25.738000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response"
},
{
"cve": "CVE-2026-3833",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-03-09T14:02:09.783000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445763"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is particularly important because it affects the correct enforcement of X.509 nameConstraints, which are specifically designed to limit the authority of subordinate CAs. In GnuTLS, the use of case-sensitive comparisons (memcmp) for dNSName and the domain portion of rfc822Name violates the case-insensitive matching requirements defined in RFC 5280 and RFC 4343. As a result, a constrained subordinate CA can bypass excludedSubtrees or permittedSubtrees restrictions simply by changing the letter casing of a domain in the SAN (e.g., ExAmPlE.CoM vs example.com). Since nameConstraints are often the only mechanism enforcing domain boundaries in delegated PKI hierarchies, this flaw effectively allows a malicious or compromised sub-CA to issue certificates for domains that should be cryptographically prohibited, enabling unauthorized certificate validation and potential TLS impersonation of restricted services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3833"
},
{
"category": "external",
"summary": "RHBZ#2445763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445763"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3833"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1803",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1803"
}
],
"release_date": "2026-04-30T17:26:28.969000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison"
},
{
"cve": "CVE-2026-4046",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-30T18:01:19.326391+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453117"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Denial of Service via iconv() function with specific character sets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact posed by this flaw is limited on Red Hat systems. The affected iconv() function has been separated out into a an independent package (`glibc-gconv-extra`) and is not used in system critical software. Some applications do rely on this package and may be affected, but they are either interactive applications or are configured to restart in the event of a crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4046"
},
{
"category": "external",
"summary": "RHBZ#2453117",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453117"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4046"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4046",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4046"
},
{
"category": "external",
"summary": "https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/",
"url": "https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33980",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33980"
},
{
"category": "external",
"summary": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD",
"url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD"
}
],
"release_date": "2026-03-30T17:16:11.021000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Denial of Service via iconv() function with specific character sets"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"cve": "CVE-2026-4437",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-20T21:01:45.993907+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449777"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Incorrect DNS response parsing via crafted DNS server response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact flaw in glibc allows a remote attacker to send a specially crafted DNS response when an application uses `gethostbyaddr` or `gethostbyaddr_r` with glibc\u0027s DNS backend configured in `nsswitch.conf`. This can lead to incorrect interpretation of DNS responses. Red Hat Enterprise Linux versions 6, 7, 8, 9, and 10, as well as OpenShift Container Platform, are affected if applications are configured to use the vulnerable DNS backend.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4437"
},
{
"category": "external",
"summary": "RHBZ#2449777",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449777"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4437",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4437"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4437",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4437"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34014",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34014"
}
],
"release_date": "2026-03-20T19:59:00.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Incorrect DNS response parsing via crafted DNS server response"
},
{
"cve": "CVE-2026-4438",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-03-20T21:02:16.458842+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a LOW impact flaw where glibc\u0027s `gethostbyaddr` and `gethostbyaddr_r` functions may return an invalid DNS hostname. This occurs when applications use a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend. This could lead to applications receiving incorrect hostname information, potentially affecting network operations or security decisions on Red Hat Enterprise Linux and OpenShift Container Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4438"
},
{
"category": "external",
"summary": "RHBZ#2449783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4438"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34015",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34015"
}
],
"release_date": "2026-03-20T19:59:06.064000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions"
},
{
"acknowledgments": [
{
"names": [
"Ali Raza"
]
}
],
"cve": "CVE-2026-4878",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-03-26T06:56:21.213270+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "RHBZ#2451615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
}
],
"release_date": "2026-04-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-5260",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-05-06T19:50:31.302000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Information disclosure via heap overread in RSA key exchange",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5260"
},
{
"category": "external",
"summary": "RHBZ#2467450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5260",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5260"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5260",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5260"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Information disclosure via heap overread in RSA key exchange"
},
{
"acknowledgments": [
{
"names": [
"Doria Tang"
],
"organization": "Stony Brook University"
}
],
"cve": "CVE-2026-5419",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"discovery_date": "2026-05-07T11:02:44.331000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467686"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with a Low severity impact because exploiting timing side-channels in cryptographic operations over a network requires precise measurement capabilities, extensive request volume, and low network jitter. While applications linking against GnuTLS to process encrypted PKCS#7 payloads are exposed to subtle processing time variances, successful extraction of plaintext padding or message content in typical Red Hat environments remains computationally complex and technically difficult to execute reliably.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5419"
},
{
"category": "external",
"summary": "RHBZ#2467686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467686"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5419",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5419"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5419",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5419"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal"
},
{
"cve": "CVE-2026-5435",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-04-28T14:01:44.684432+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463465"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5435"
},
{
"category": "external",
"summary": "RHBZ#2463465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
}
],
"release_date": "2026-04-28T11:58:54.962000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
},
{
"cve": "CVE-2026-5450",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-20T21:01:35.403778+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "RHBZ#2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
}
],
"release_date": "2026-04-20T20:55:41.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
},
{
"cve": "CVE-2026-5928",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-04-20T21:01:38.811304+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459854"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5928"
},
{
"category": "external",
"summary": "RHBZ#2459854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
}
],
"release_date": "2026-04-20T20:37:31.743000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
},
{
"cve": "CVE-2026-6238",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-04-28T19:09:30.721026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463539"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6238"
},
{
"category": "external",
"summary": "RHBZ#2463539",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069"
}
],
"release_date": "2026-04-28T16:43:08.526000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response"
},
{
"cve": "CVE-2026-6653",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-06-22T14:01:42.248415+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491354"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the `xmlParseInternalSubset` function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service (DoS), making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact use-after-free vulnerability in libxml2 can lead to a denial of service in Red Hat products that process untrusted XML input. In the worst-case scenario, a remote attacker is able to provide specially crafted XML, which, if parsed by an affected application, could cause the application to crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6653"
},
{
"category": "external",
"summary": "RHBZ#2491354",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491354"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6653"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260",
"url": "https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058"
}
],
"release_date": "2026-06-22T12:40:31.424000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nUpdating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free"
},
{
"cve": "CVE-2026-7383",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-27T13:08:15.013000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481879"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Low impact. This flaw in OpenSSL\u0027s ASN1_mbstring_ncopy() function, leading to a heap buffer overflow, is difficult to exploit in typical Red Hat environments. Exploitation requires an application to directly call the vulnerable function with an extremely large, attacker-controlled input (over half a gigabyte), a scenario not present in standard OpenSSL certificate or network protocol handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "RHBZ#2481879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7383",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7383"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing"
},
{
"cve": "CVE-2026-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-03T07:01:27.043110+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496763"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Insecure connection establishment due to TLS configuration mismatch",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw as `curl` may establish an insecure connection when attempting to upgrade a transfer with STARTTLS, potentially reusing an existing connection with mismatched TLS configurations. This could lead to unexpected data exposure or compromise, particularly in environments where `curl` is used for sensitive data transfers and relies on STARTTLS for security.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8286"
},
{
"category": "external",
"summary": "RHBZ#2496763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496763"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.html",
"url": "https://curl.se/docs/CVE-2026-8286.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.json",
"url": "https://curl.se/docs/CVE-2026-8286.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3718195",
"url": "https://hackerone.com/reports/3718195"
}
],
"release_date": "2026-07-03T06:14:17.541000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Insecure connection establishment due to TLS configuration mismatch"
},
{
"cve": "CVE-2026-9076",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-05-27T13:10:14.368000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481880"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Low impact denial of service due to a heap out-of-bounds read in `kek_unwrap_key()` when processing attacker-supplied CMS data with an attacker-chosen stream-mode KEK cipher. This flaw requires specific memory conditions (input buffer ending at a page boundary with an unmapped following page) to trigger a crash, which is uncommon in typical Red Hat environments. No information disclosure is possible, and FIPS modules are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "RHBZ#2481880",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9076"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption"
},
{
"cve": "CVE-2026-9547",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-03T07:01:12.182841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496758"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server\u0027s host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Man-in-the-middle attack via SSH host key bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw where libcurl-based applications performing SCP or SFTP transfers with the CURLOPT_SSH_KEYFUNCTION callback may silently accept an untrusted server. This occurs when a server presents a host key type that differs from the one recorded in the known_hosts file, bypassing a critical host key verification and enabling potential man-in-the-middle attacks. The vulnerability requires specific application callback usage, not a general curl client default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9547"
},
{
"category": "external",
"summary": "RHBZ#2496758",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496758"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.html",
"url": "https://curl.se/docs/CVE-2026-9547.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.json",
"url": "https://curl.se/docs/CVE-2026-9547.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3751712",
"url": "https://hackerone.com/reports/3751712"
}
],
"release_date": "2026-07-03T06:18:44.499000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Man-in-the-middle attack via SSH host key bypass"
},
{
"cve": "CVE-2026-11822",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-09T20:01:15.006955+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite\u0027s FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the SQLite FTS5 full-text search extension can lead to arbitrary code execution or denial of service. Exploitation requires an application to process a specially crafted SQLite database containing malformed FTS5 page data, which could occur if an attacker provides a malicious database to a vulnerable application. This risk is elevated in scenarios where applications handle untrusted SQLite database files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "RHBZ#2487258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension",
"url": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension"
}
],
"release_date": "2026-06-09T19:08:31.019000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data"
},
{
"cve": "CVE-2026-11824",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-06-09T20:02:19.874232+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487269"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in SQLite\u0027s FTS5 full-text search extension can lead to arbitrary code execution or application crashes due to a heap-based buffer overflow. Exploitation requires an attacker to provide a specially crafted SQLite database, which must then be processed by an application compiled with FTS5 support. While requiring user interaction and local access, the potential for full impact on system resources justifies the Important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "RHBZ#2487269",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487269"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11824",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11824"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate",
"url": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate"
}
],
"release_date": "2026-06-09T19:21:42.603000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5"
},
{
"cve": "CVE-2026-11979",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-29T14:01:11.961973+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494191"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially allow the attacker to execute arbitrary code within the context of the xmlcatalog process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in libxml2 affects the `xmlcatalog` utility when operating in `--shell` mode. Exploitation requires an attacker to provide specially crafted, excessively long input, leading to stack-based buffer overflows. This vulnerability is limited to scenarios where an attacker can control input to the `xmlcatalog` utility, reducing its overall exposure in typical Red Hat deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11979"
},
{
"category": "external",
"summary": "RHBZ#2494191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11979"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/06/CVE-2026-11979",
"url": "https://cert.pl/en/posts/2026/06/CVE-2026-11979"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e",
"url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"
}
],
"release_date": "2026-06-29T13:21:42.697000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow"
},
{
"cve": "CVE-2026-13757",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2026-06-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494556"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13757"
},
{
"category": "external",
"summary": "RHBZ#2494556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13757"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-p2wm-69qx-x25w",
"url": "https://github.com/advisories/GHSA-p2wm-69qx-x25w"
}
],
"release_date": "2026-06-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "This CVE requires same-user access to the p11-kit RPC Unix domain socket (/run/user/\u003cuid\u003e/p11-kit/pkcs11-*). Any process running as the socket-owning user can trigger the crash without further authentication.\n\nIf p11-kit is managed via systemd --user, ensure `Restart=on-failure` is set in the unit file so that a crash is automatically recovered without manual intervention.\n\nRed Hat recommends updating p11-kit to version 0.26.3 or later, which introduces a recursion depth limit in the RPC attribute parsing and fully addresses this flaw.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing"
},
{
"cve": "CVE-2026-14164",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"discovery_date": "2026-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493411"
}
],
"notes": [
{
"category": "description",
"text": "A double free issue has been identified in libarchive\u0027s RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has assessed this CVE as 7.5 CVSS with Moderate security Impact. This assessment reflects the library\u0027s typical deployment within enterprise software, where libarchive is frequently embedded into automated, network-accessible services that receive and process archives originating from remote sources. In these environments, a specially crafted RAR5 archive may be delivered and processed automatically without requiring direct user interaction, allowing a remote attacker to trigger the vulnerability and cause the affected application or service processing the archive to terminate unexpectedly, resulting in a denial of service.\n\nFrom a standalone library perspective, however, the vulnerable code is only reached when an application opens and processes a crafted RAR5 archive. Evaluating libarchive in isolation, without considering downstream deployment models, the vulnerability more closely aligns with a CVSS score of 5.5-CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (Moderate), reflecting an Attack Vector of Local (AV:L) and User Interaction Required (UI:R). This is because the crafted archive must first be delivered to and processed by a local application before the vulnerable parsing logic is executed. \n\nRed Hat\u0027s assigned score instead reflects the operational deployment of libarchive in automated, network-facing workloads in downstream environment models rather than the standalone library in isolation.\n\n```\n\nThis vulnerability only affects libarchive releases that include support for the RAR5 archive format. RAR5 support was first introduced upstream in libarchive 3.4.0 (https://github.com/libarchive/libarchive/wiki/ReleaseNotes#libarchive-340). Earlier libarchive releases do not contain the vulnerable RAR5 parsing code and are therefore not affected.\n\nRed Hat Enterprise Linux 6, 7, and 8 ship Libarchive versions prior to v3.4.0 that do not include RAR5 support and are therefore not affected.\n\n```",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14164"
},
{
"category": "external",
"summary": "RHBZ#2493411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14164"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14164",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14164"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/issues/3069",
"url": "https://github.com/libarchive/libarchive/issues/3069"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/3071",
"url": "https://github.com/libarchive/libarchive/pull/3071"
}
],
"release_date": "2026-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update once it becomes available.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()"
},
{
"acknowledgments": [
{
"names": [
"Gitee Codepecker Lab"
]
}
],
"cve": "CVE-2026-15588",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499675"
}
],
"notes": [
{
"category": "description",
"text": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the `GDBus` component of GLib. A local or remote unauthenticated attacker could send an engineered stream of data without line length limitations during the authentication process (`gdbusauth`), leading to excessive memory allocation and CPU consumption. This resource exhaustion can result in a denial-of-service (DoS) condition, causing applications or services dependent on GLib to become unstable or crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15588"
},
{
"category": "external",
"summary": "RHBZ#2499675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15588"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15588",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15588"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3985"
}
],
"release_date": "2026-07-12T10:10:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering"
},
{
"acknowledgments": [
{
"names": [
"asotyc"
]
}
],
"cve": "CVE-2026-16118",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-07-17T13:20:23.862000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501732"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker must convince a user to install a malicious MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) and process it with an application performing MIME type detection, limiting its exposure. Also, only little-endian systems are vulnerable. Due to these reasons, this issue has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16118"
},
{
"category": "external",
"summary": "RHBZ#2501732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16118"
},
{
"category": "external",
"summary": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41",
"url": "https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41"
}
],
"release_date": "2026-07-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Do not install a MIME magic file or content from untrusted sources.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c"
},
{
"cve": "CVE-2026-28390",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-07T23:01:18.313921+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been rated as moderate by redhat because the vulnerability is limited to a denial-of-service condition caused by a NULL pointer dereference in OpenSSL CMS processing, without evidence of memory corruption or code execution, furthermore the Affected functionality is niche. The vulnerable path requires:\nCMS/S/MIME processing,\nspecifically CMS_decrypt(),\nwith RSA-OAEP KeyTransportRecipientInfo.\nMany OpenSSL consumers never use CMS APIs, never process S/MIME,\nor do not decrypt attacker-controlled CMS objects.\nSo exposure is far narrower than a generic TLS parsing vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "RHBZ#2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
"url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
"url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
"url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
"url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
"url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T22:00:54.172000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to services that process untrusted CMS data can also reduce exposure to this Denial of Service vulnerability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing"
},
{
"cve": "CVE-2026-29111",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-03-23T22:01:54.593547+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication (IPC) API call with spurious data. In older versions (v249 and earlier), this can lead to stack overwriting with attacker-controlled content, potentially enabling arbitrary code execution or privilege escalation. In newer versions (v250 and later), the flaw causes systemd to assert and freeze, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29111"
},
{
"category": "external",
"summary": "RHBZ#2450505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29111"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a",
"url": "https://github.com/systemd/systemd/commit/1d22f706bd04f45f8422e17fbde3f56ece17758a"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6",
"url": "https://github.com/systemd/systemd/commit/20021e7686426052e3a7505425d7e12085feb2a6"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412",
"url": "https://github.com/systemd/systemd/commit/21167006574d6b83813c7596759b474f56562412"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd",
"url": "https://github.com/systemd/systemd/commit/3cee294fe8cf4fa0eff933ab21416d099942cabd"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f",
"url": "https://github.com/systemd/systemd/commit/42aee39107fbdd7db1ccd402a2151822b2805e9f"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f",
"url": "https://github.com/systemd/systemd/commit/54588d2dedff54bfb6036670820650e4ea74628f"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69",
"url": "https://github.com/systemd/systemd/commit/7ac3220213690e8a8d6d2a6e81e43bd1dce01d69"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6",
"url": "https://github.com/systemd/systemd/commit/80acea4ef80a4bb78560ed970c34952299b890d6"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c",
"url": "https://github.com/systemd/systemd/commit/b5fd14693057e5f2c9b4a49603be64ec3608ff6c"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8",
"url": "https://github.com/systemd/systemd/commit/efa6ba2ab625aaa160ac435a09e6482fc63bdbe8"
},
{
"category": "external",
"summary": "https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764",
"url": "https://github.com/systemd/systemd/security/advisories/GHSA-gx6q-6f99-m764"
}
],
"release_date": "2026-03-23T21:03:56.120000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data"
},
{
"cve": "CVE-2026-31790",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-25T02:59:10.179000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451094"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This flaw affects applications utilizing RSASVE key encapsulation, where an attacker-supplied invalid RSA public key is used with EVP_PKEY_encapsulate() without prior validation. This can lead to the disclosure of sensitive, uninitialized memory buffer contents to a malicious peer.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31790"
},
{
"category": "external",
"summary": "RHBZ#2451094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451094"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key"
},
{
"cve": "CVE-2026-33845",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-03-24T05:35:59.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue marked as Important severity due to its remote, pre-authentication reachability and its impact on a critical DTLS handshake parsing path. The vulnerability can be triggered by an unauthenticated attacker sending crafted DTLS handshake fragments, requiring no prior access or interaction. It leads to an out-of-bounds read caused by an integer underflow in fragment reassembly, operating entirely on attacker-controlled input. Such flaws in low-level protocol parsing are particularly serious, as they may result in disclosure of sensitive process memory, including cryptographic or session-related data, and can also cause reliable application crashes leading to denial of service. Given that DTLS is commonly used in network-facing services such as VPNs and real-time communication systems, the exposure surface is broad. The combination of unauthenticated remote exploitation, memory safety violation, and potential confidentiality and availability impact justifies classifying this issue as high severity rather than moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33845"
},
{
"category": "external",
"summary": "RHBZ#2450624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33845",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33845",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33845"
}
],
"release_date": "2026-04-30T17:28:41.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment"
},
{
"cve": "CVE-2026-33846",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-03-24T05:38:09.899000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450625"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability should be classified as an important flaw rather than moderate because it exposes a pre-authentication, remotely reachable heap buffer overflow in the DTLS handshake processing path, which is part of the core protocol handling logic and commonly exposed in network-facing services. The flaw enables an attacker to inject controlled data at attacker-chosen offsets and sizes beyond allocated heap boundaries by exploiting inconsistent message_length handling across fragments, effectively creating a constrained but meaningful heap write primitive. Unlike benign memory safety bugs, this condition is deterministically triggerable with a small number of crafted packets and no environmental dependencies for denial-of-service, and it targets a long-lived parsing state where memory corruption can affect adjacent heap structures. Even if reliable code execution requires additional heap manipulation or layout knowledge, the combination of remote reachability, lack of authentication, controlled memory corruption capability, and trivial crashability significantly elevates the risk profile beyond moderate severity. In real-world deployments, such primitives are often sufficient to enable heap grooming and exploitation chains, particularly in services that repeatedly process attacker-controlled input, making this a materially important security flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33846"
},
{
"category": "external",
"summary": "RHBZ#2450625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33846",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33846"
}
],
"release_date": "2026-05-04T08:53:59.249000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly"
},
{
"cve": "CVE-2026-34180",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-27T13:10:51.985000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481881"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low impact vulnerability in OpenSSL\u0027s ASN.1 decoder affects 64-bit Unix-like platforms, where processing a crafted DER-encoded ASN.1 structure exceeding 2 gigabytes can lead to a heap buffer over-read. This may result in application crashes (Denial of Service) or unintended memory exposure. Red Hat products are only affected if they process untrusted, excessively large ASN.1 input using OpenSSL\u0027s d2i_* decoding functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "RHBZ#2481881",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34180"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure."
},
{
"cve": "CVE-2026-34181",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481882"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Low: This flaw allows an attacker to forge PKCS#12 files with a 1 in 256 probability, leading to the acceptance of attacker-controlled certificates and private keys by services configured to use PBMAC1 authentication. Red Hat products utilizing OpenSSL versions 3.0, 1.1.1, or 1.0.2 are not affected, as these versions do not support PBMAC1 in PKCS#12.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34181"
},
{
"category": "external",
"summary": "RHBZ#2481882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34181"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, enforce strict validation on all uploaded PKCS#12 files to reject those containing abnormally short security keys. Additionally, enabling FIPS mode on your system can help protect your environment, as the vulnerable OpenSSL code operates entirely outside the approved FIPS cryptographic boundary.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys"
},
{
"cve": "CVE-2026-34182",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-05-27T13:59:43+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481884"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing could allow an on-path attacker to forge messages or bypass integrity validation. This is due to insufficient input validation on cipher and tag length fields, potentially leading to key-equivalent functionality or integrity bypass in applications utilizing affected OpenSSL versions for CMS AuthEnvelopedData.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "RHBZ#2481884",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Systems configured to operate in FIPS mode are not affected by this vulnerability. To mitigate this issue, ensure that OpenSSL is operating in FIPS mode by enabling the system-wide FIPS policy. This may have broader implications for cryptographic operations on the system and should be evaluated for compatibility with existing applications. A system reboot may be required for the changes to take effect.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages"
},
{
"cve": "CVE-2026-34183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-27T14:04:59+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481885"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate severity flaw exists in the QUIC PATH_CHALLENGE handler, allowing a remote attacker to exhaust heap memory of a QUIC client or server. By flooding the local QUIC stack with PATH_CHALLENGE frames, a malicious peer can trigger unbounded memory allocation, leading to a denial of service for applications utilizing the vulnerable QUIC implementation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "RHBZ#2481885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, apply UDP rate limiting at your network edge to throttle malicious traffic. If QUIC is not strictly required, disable the listener entirely and configure your application to use standard TLS over TCP. Additionally, enforce strict process memory limits using cgroups to prevent host-wide memory exhaustion during an attack.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler"
},
{
"cve": "CVE-2026-40355",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-28T07:01:45.120520+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463370"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw allows an unauthenticated remote attacker to cause a Denial of Service in MIT Kerberos 5 by triggering a NULL pointer dereference. Exploitation requires the NegoEx mechanism to be explicitly registered in the system\u0027s GSSAPI configuration, which is not a default state in all Red Hat environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40355"
},
{
"category": "external",
"summary": "RHBZ#2463370",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463370"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40355"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, remove the NegoEx mechanism registration from the system\u0027s GSSAPI configuration if it is not required. This can typically be achieved by removing or commenting out the relevant entry in `/etc/gss/mech`. A restart of services utilizing Kerberos might be necessary for the changes to take effect, which could impact Kerberos-dependent functionality.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism"
},
{
"cve": "CVE-2026-40356",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-04-28T07:01:37.543641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service flaw in MIT Kerberos 5 (krb5) allows an unauthenticated remote attacker to trigger an integer underflow and out-of-bounds read. This vulnerability, which can lead to process termination, specifically affects systems where the NegoEx mechanism is registered and `gss_accept_sec_context()` is called. While Kerberos is a fundamental service, the prerequisite of a registered NegoEx mechanism limits the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "RHBZ#2463368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the NegoEx mechanism is not registered in the `/etc/gss/mech` configuration file. Removing the corresponding entry from this file will prevent the vulnerable code path from being activated. This action may impact services that rely on the NegoEx GSS-API mechanism. A restart of affected Kerberos-dependent services may be required for the change to take effect.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read"
},
{
"cve": "CVE-2026-41989",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-23T05:00:56.113348+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461063"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman (ECDH) ciphertext to the `gcry_pk_decrypt` function. This can lead to a heap-based buffer overflow, potentially causing a denial of service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41989"
},
{
"category": "external",
"summary": "RHBZ#2461063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41989"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41989",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41989"
},
{
"category": "external",
"summary": "https://dev.gnupg.org/T8211",
"url": "https://dev.gnupg.org/T8211"
},
{
"category": "external",
"summary": "https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html",
"url": "https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/21/1",
"url": "https://www.openwall.com/lists/oss-security/2026/04/21/1"
}
],
"release_date": "2026-04-23T04:30:26.124000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"discovery_date": "2026-05-06T16:32:32.382000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467279"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact for this flaw has been downgraded on Red Hat Enterprise Linux due to the following reason:\n\n- The number of elements passed to the vulnerable function at runtime is known and is at most 6 and the element size is sufficiently small. glibc\u2019s qsort implementation will not exercise the quick sort code path, which would otherwise cause an infloop or out-of-bound write.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "RHBZ#2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42010",
"cwe": {
"id": "CWE-170",
"name": "Improper Null Termination"
},
"discovery_date": "2026-05-06T16:57:37.044000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2013Shamir\u2013Adleman \u2013 Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Authentication Bypass via NUL Character in Username",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "RHBZ#2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Authentication Bypass via NUL Character in Username"
},
{
"acknowledgments": [
{
"names": [
"Haruto Kimura"
],
"organization": "Stella"
}
],
"cve": "CVE-2026-42011",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:06:25.319000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Security bypass due to incorrect name constraint handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42011"
},
{
"category": "external",
"summary": "RHBZ#2467437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42011"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Security bypass due to incorrect name constraint handling"
},
{
"acknowledgments": [
{
"names": [
"Oleh Konko"
],
"organization": "1Seal"
}
],
"cve": "CVE-2026-42012",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:16:02.753000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467441"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42012"
},
{
"category": "external",
"summary": "RHBZ#2467441",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467441"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42012"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs"
},
{
"acknowledgments": [
{
"names": [
"Haruto Kimura"
],
"organization": "Stella"
},
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42013",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:47:00.134000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42013"
},
{
"category": "external",
"summary": "RHBZ#2467448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42013"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name"
},
{
"acknowledgments": [
{
"names": [
"Luigino Camastra"
]
},
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42014",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-06T19:51:54.069000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467451"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42014"
},
{
"category": "external",
"summary": "RHBZ#2467451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42014"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1766",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1766"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin"
},
{
"acknowledgments": [
{
"names": [
"Zou Dikai"
]
}
],
"cve": "CVE-2026-42015",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-05-07T10:50:28.379000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42015"
},
{
"category": "external",
"summary": "RHBZ#2467678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42015"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling"
},
{
"cve": "CVE-2026-42764",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:08:07+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481887"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server\u0027s address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: NULL pointer dereference in QUIC server initial packet handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity issue. A NULL pointer dereference can occur in the OpenSSL QUIC server when processing initial packets with invalid tokens, leading to a denial of service. This vulnerability is only exploitable if the client address validation is explicitly disabled using the `SSL_LISTENER_FLAG_NO_VALIDATE` flag, which is not the default configuration for OpenSSL QUIC servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "RHBZ#2481887",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the OpenSSL QUIC server has client address validation enabled. This is the default configuration. If the `SSL_LISTENER_FLAG_NO_VALIDATE` flag is being used with the `SSL_new_listener()` call, it should be removed to prevent the vulnerability from being exploitable.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: NULL pointer dereference in QUIC server initial packet handling"
},
{
"cve": "CVE-2026-42766",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481890"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible NULL Dereference in Password-Based CMS Decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated as Low impact. A NULL pointer dereference in OpenSSL\u0027s CMS decryption can be triggered by a specially crafted password-encrypted CMS message, leading to an Red Hat application crash and Denial of Service. This affects applications that perform password-based CMS decryption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "RHBZ#2481890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42766",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42766"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible NULL Dereference in Password-Based CMS Decryption"
},
{
"cve": "CVE-2026-42767",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481891"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Low severity issue. A null pointer dereference flaw in the OpenSSL Certificate Management Protocol (CMP) client could be triggered by an attacker-controlled CMP server. This could lead to a denial of service in applications that process untrusted CMP/CRMF messages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42767"
},
{
"category": "external",
"summary": "RHBZ#2481891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42767",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42767"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that OpenSSL CMP client applications only communicate with trusted Certificate Management Protocol (CMP) servers. If CMP client functionality is not required, consider disabling or restricting its use to reduce exposure.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption"
},
{
"cve": "CVE-2026-42768",
"cwe": {
"id": "CWE-205",
"name": "Observable Behavioral Discrepancy"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481892"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim\u0027s private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application\u0027s error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity vulnerability in OpenSSL\u0027s CMS_decrypt() and PKCS7_decrypt() functions exposes a Bleichenbacher-style oracle. Exploitation requires an attacker to control input CMS/S/MIME messages and observe decryption errors or output, a scenario deemed unlikely in most Red Hat product deployments. The attack could allow decryption or signing of messages with a victim\u0027s private RSA key.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42768"
},
{
"category": "external",
"summary": "RHBZ#2481892",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42768"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42768",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42768"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, applications utilizing CMS_decrypt() or PKCS7_decrypt() should ensure a recipient certificate is always provided to identify the specific RecipientInfo for decryption. This practice helps prevent the Bleichenbacher-style oracle attack by ensuring proper key identification.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()"
},
{
"cve": "CVE-2026-42769",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481893"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue has a Low impact as it requires an attacker to already possess valid Registration Authority (RA) level credentials to exploit. A flaw in the Certificate Management Protocol (CMP) root CA key update process could allow an RA to substitute the root CA certificate for CMP clients with an arbitrary certificate, potentially leading to a trust-anchor substitution. FIPS modules are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42769"
},
{
"category": "external",
"summary": "RHBZ#2481893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42769"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate"
},
{
"cve": "CVE-2026-42770",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key\u0027s subgroup membership, an attacker can recover the victim\u0027s private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: FFC-DH Peer Validation Uses Attacker-Supplied q",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity flaw in OpenSSL affects systems configured to use DHX (X9.42) peer keys for key derivation, allowing a malicious peer to potentially recover a victim\u0027s private key. The attack requires specific conditions, such as long-lived RA/CA DHX keys in CMP deployments or bespoke applications utilizing X9.42 DHX static keys with interactive protocols, limiting its broader impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "RHBZ#2481894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42770",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42770"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: FFC-DH Peer Validation Uses Attacker-Supplied q"
},
{
"cve": "CVE-2026-45445",
"cwe": {
"id": "CWE-1204",
"name": "Generation of Weak Initialization Vector (IV)"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481896"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity flaw where applications utilizing the AES-OCB cipher through OpenSSL\u0027s EVP_Cipher() one-shot interface may silently discard the provided initialization vector (IV). This leads to nonce reuse, compromising confidentiality and enabling universal forgery of authentication tags. Red Hat products are primarily affected if they include or rely on third-party applications that specifically employ this less common and discouraged API usage with AES-OCB, as standard OpenSSL SSL/TLS implementations and applications using the recommended streaming AEAD API are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "RHBZ#2481896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path"
},
{
"cve": "CVE-2026-45446",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481897"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Low impact. It affects applications that utilize OpenSSL\u0027s AES-SIV or AES-GCM-SIV modes within custom protocols and specifically mishandle empty ciphertexts. Standard OpenSSL protocols, such as TLS, are not affected. Successful exploitation requires an application to use the EVP interface and to skip ciphertext updates when processing zero-length ciphertexts, representing an uncommon and non-default configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "RHBZ#2481897",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45446",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45446"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "The vulnerability arises from specific application implementations using OpenSSL\u0027s AES-SIV or AES-GCM-SIV modes with custom protocols and an atypical handling of empty ciphertexts. As this scenario is not a default or commonly deployed configuration in Red Hat products, and no direct configuration or operational control exists to mitigate this specific flaw without patching, the following applies:\n\nMitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-48864",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-21T23:19:41+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460425"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This heap buffer overflow in libsolv\u0027s page decompression logic can lead to out-of-bounds reads and writes when processing specially crafted `.solv` files. Exploitation requires a victim application to ingest malicious repository metadata, limiting the attack vector to scenarios involving user interaction or untrusted content sources. Given the user interaction needed, Red Hat Product Security has rated this vulnerability as having a impact of Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48864"
},
{
"category": "external",
"summary": "RHBZ#2460425",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460425"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48864"
}
],
"release_date": "2026-05-26T16:07:55.363000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54369",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-16T23:47:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490277"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: Symlink traversal privilege escalation via libacl functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important because a local attacker who controls any component of a pathname processed by a privileged process using libacl can redirect ACL operations to arbitrary files. Exploitation requires local access with the ability to create symlinks in a directory that a privileged program later processes with acl_get_file() or acl_set_file(). In default RHEL and OpenShift CoreOS configurations, standard file permission settings limit where unprivileged users can create symlinks, reducing the practical attack surface. Programs that operate on user-supplied paths with elevated privileges are most at risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54369"
},
{
"category": "external",
"summary": "RHBZ#2490277",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Restrict unprivileged users from creating symlinks in directories that privileged processes operate on with ACL commands. Where possible, use the fs.protected_symlinks sysctl (enabled by default on RHEL 7+), which prevents symlink following in world-writable sticky directories unless the owner of the symlink matches the owner of the target file or directory.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "acl: Symlink traversal privilege escalation via libacl functions"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54370",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-16T19:47:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490279"
}
],
"notes": [
{
"category": "description",
"text": "A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "acl: TOCTOU Symlink Traversal via getfacl/setfacl",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54370"
},
{
"category": "external",
"summary": "RHBZ#2490279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "acl: TOCTOU Symlink Traversal via getfacl/setfacl"
},
{
"acknowledgments": [
{
"names": [
"Andrew Tridgell \u003ctridge60@gmail.com\u003e",
"Alexander Peslyak \u003csolar@openwall.com\u003e"
]
}
],
"cve": "CVE-2026-54371",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-16T23:47:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490283"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `attr` package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by `getfattr` or during backup restoration by `setfattr`, which reads and resolves full pathnames from backup files. In both cases, when these utilities are executed by a privileged process over a path controlled by the attacker, this can lead to local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity flaw in the `getfattr` utility allows a local attacker to achieve privilege escalation. Exploitation requires a privileged process to invoke `getfattr` on a path controlled by the attacker, where a symbolic link can redirect operations to arbitrary files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54371"
},
{
"category": "external",
"summary": "RHBZ#2490283",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54371"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371"
}
],
"release_date": "2026-06-29T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58010",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:21:49.589000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492243"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses \u003e instead of \u003e=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications calling the `g_variant_is_normal_form()`,\u00a0`g_variant_get_normal_form()` or\u00a0`g_variant_byteswap()` functions that process untrusted GVariant data received from D-Bus, network or file are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 1 byte, leading to an information disclosure of only 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58010"
},
{
"category": "external",
"summary": "RHBZ#2492243",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492243"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58010"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915"
}
],
"release_date": "2026-03-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58011",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-24T16:30:03.305000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that allow a user to submit a date to `g_date_time_add_full()` and later call any getter functions, such as `g_date_time_get_month()` or `g_date_time_get_year()`, with the returned GDateTime object are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 2 bytes, leading to a denial of service due to logic errors that a corrupted date can trigger. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58011"
},
{
"category": "external",
"summary": "RHBZ#2492245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58011"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917"
}
],
"release_date": "2026-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, in applications processing user-supplied dates, implement input validation to ensure the supplied date is within the supported range before calling g_date_time_add_full() with untrusted data, specifically rejecting inputs that result in a negative or zero days field.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58012",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:40:58.048000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492247"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that use g_regex_replace() or g_regex_replace_eval() with the G_REGEX_RAW compile flag and allow user-controlled replacement strings containing case-change escapes (\\u,\u00a0\\l,\u00a0\\U,\u00a0\\L) are vulnerable to this issue. This flaw can cause a buffer over-read of 1-5 bytes, leading to a minor information disclosure and a denial of service when the buffer over-read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58012"
},
{
"category": "external",
"summary": "RHBZ#2492247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58012"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918"
}
],
"release_date": "2026-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement strict input validation to sanitize user-supplied replacement strings, specifically rejecting or escaping case-change modifiers (\\u, \\l, \\U, \\L) before calling g_regex_replace() or g_regex_replace_eval() when the G_REGEX_RAW compile flag is used. Removing the G_REGEX_RAW flag or hardcoding the replacement strings will completely neutralize this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58013",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-06-24T16:49:18.947000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492248"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\"",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications calling g_io_channel_set_line_term() with a multi-byte line terminator (length greater than one) and subsequently calling g_io_channel_read_line_backend() are vulnerable to this issue. This flaw can cause a buffer over-read of 8 bytes, leading to an information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58013"
},
{
"category": "external",
"summary": "RHBZ#2492248",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492248"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925"
}
],
"release_date": "2026-04-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict any custom line terminator string passed to g_io_channel_set_line_term() to a maximum length of one byte before calling g_io_channel_read_line_backend(). Using the default line terminators will completely neutralize this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\""
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58014",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-06-24T17:16:25.796000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: off-by-one error in glib/gkeyfile.c via \"g_key_file_get_locale_string_list\"",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications loading or parsing untrusted key files, typically .desktop or .ini files, are vulnerable to this issue. This flaw can cause an off-by-one error, leading to an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58014"
},
{
"category": "external",
"summary": "RHBZ#2492255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930"
}
],
"release_date": "2026-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement input validation to sanitize untrusted key files (such as .desktop or .ini files), specifically rejecting or stripping empty values before calling g_key_file_get_locale_string_list(). Alternatively, restricting the application to only load key files from trusted sources will completely neutralize this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: off-by-one error in glib/gkeyfile.c via \"g_key_file_get_locale_string_list\""
},
{
"acknowledgments": [
{
"names": [
"Thepwnisher"
]
}
],
"cve": "CVE-2026-58015",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-24T17:22:00.405000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be in a position to perform a man-in-the-middle (MitM) attack on the connection or operate a malicious server that the client connects to. Furthermore, extracting data requires an oracle attack (guessing and hashing), increasing the complexity of exploitation. However, if successful, this issue allows the exfiltration of sensitive secrets, such as SSH keys or API tokens, from the filesystem. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58015"
},
{
"category": "external",
"summary": "RHBZ#2492256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58015"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that applications only connect to trusted D-Bus servers and operate within secure, isolated networks to prevent man-in-the-middle (MitM) attacks. If feasible, configuring the D-Bus connection to strictly require the EXTERNAL authentication mechanism and disabling DBUS_COOKIE_SHA1 will completely neutralize this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive"
},
{
"acknowledgments": [
{
"names": [
"linhlhq"
]
}
],
"cve": "CVE-2026-58016",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-06-24T17:29:08.344000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492257"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\"",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications processing D-Bus introspection XML input from untrusted sources with g_dbus_node_info_new_for_xml() are vulnerable to this issue. In GLib itself, the gdbus command line tool is the primary vector for local exploitation. However, other applications using the vulnerable function may process untrusted input in a way that allows a remote attacker to trigger this flaw. This vulnerability can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58016"
},
{
"category": "external",
"summary": "RHBZ#2492257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58016",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58016"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3932",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3932"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement input validation to sanitize untrusted D-Bus introspection XML, specifically rejecting malformed structures such as \u003cnode\u003e elements improperly nested within \u003cmethod\u003e, \u003csignal\u003e, \u003cproperty\u003e or \u003carg\u003e elements before calling g_dbus_node_info_new_for_xml(). Alternatively, restricting the application to only process XML input from trusted, authenticated sources will completely neutralize this issue.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\""
},
{
"cve": "CVE-2026-58055",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-06-28T03:01:22.756250+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493954"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in nghttp2\u0027s nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in nghttp2\u0027s nghttpx proxy allows remote HTTP request smuggling and cross-client response poisoning by forwarding malformed HTTP/1.1 Upgrade requests containing a Content-Length body. This is rated Moderate because successful exploitation requires high attack complexity on the backend server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58055"
},
{
"category": "external",
"summary": "RHBZ#2493954",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493954"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58055"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
},
{
"category": "external",
"summary": "https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc",
"url": "https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e",
"url": "https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length",
"url": "https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length"
}
],
"release_date": "2026-06-28T01:32:57.163000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T13:32:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72502"
},
{
"category": "workaround",
"details": "Configure your WAF or load balancer to drop incoming HTTP/1.1 requests that contain both Upgrade and Content-Length headers. This blocks the malformed traffic at the edge before it can reach the vulnerable proxy without impacting legitimate users.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:41b67648465fa70bec1fb0a771a15c04c1daf0b1d053b0872ca8016f2b2f7f80_amd64",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:54c108742618f55c9c52ee7db0bce351e5cb84693adfdb9c12b588636418b387_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:f8086b33e4cdeb0df936f6972ed7046f9b3a10b8f175d3f02a98d2ef228c904c_s390x",
"Cert Manager support for Red Hat OpenShift release 1.20:registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:fe8ab3b44c313f20004b145ea7d5584996eb852338bac14a3e5b9cc64480851e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…