{
  "threat_severity" : "Important",
  "public_date" : "2026-08-13T21:58:52Z",
  "bugzilla" : {
    "description" : "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
    "id" : "2515815",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-776",
  "details" : [ "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.", "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition." ],
  "statement" : "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60306",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "golang-0:1.26.7-1.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62577",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "go-fdo-client-0:1.0.0-4.el10_2.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62578",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "go-fdo-server-0:1.0.1-2.el10_2.4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62631",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "golang-github-openprinting-ipp-usb-0:0.9.27-7.el10_2.3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63022",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "grafana-0:10.2.6-28.el10_2.5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63119",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "grafana-pcp-0:5.3.0-8.el10_2.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-04T00:00:00Z",
    "advisory" : "RHSA-2026:63127",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "rhc-1:0.3.8-7.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-04T00:00:00Z",
    "advisory" : "RHSA-2026:63332",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "buildah-2:1.43.1-5.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64777",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "buildah-2:1.43.1-6.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64788",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "git-lfs-0:3.7.1-5.el10_2.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64818",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "skopeo-2:1.22.2-5.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65116",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "opentelemetry-collector-0:0.152.1-2.el10_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65534",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "image-builder-0:52.1-1.el10_2.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-09-01T00:00:00Z",
    "advisory" : "RHSA-2026:61882",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "golang-0:1.26.7-1.el10_0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65335",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "ignition-0:2.21.0-3.el10_0.4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60305",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "go-toolset:rhel8-8100020260824145918.a3795dee"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62407",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "grafana-0:9.2.10-33.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63124",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "grafana-pcp-0:5.1.1-18.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-09-04T00:00:00Z",
    "advisory" : "RHSA-2026:63163",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "container-tools:rhel8-8100020260901110702.afee755d"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64786",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "rhc-1:0.2.5-10.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-08-26T00:00:00Z",
    "advisory" : "RHSA-2026:60304",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "golang-0:1.26.7-1.el9_8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62406",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "grafana-0:10.2.6-23.el9_8.3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63130",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "rhc-1:0.2.7-11.el9_8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-09-03T00:00:00Z",
    "advisory" : "RHSA-2026:63136",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "grafana-pcp-0:5.1.1-17.el9_8.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65117",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "opentelemetry-collector-0:0.152.1-2.el9_8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65153",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "osbuild-composer-0:165.1-4.el9_8.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62602",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.2",
    "package" : "golang-0:1.26.7-1.el9_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62754",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.2",
    "package" : "osbuild-composer-0:76.1-9.el9_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65359",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.2",
    "package" : "ignition-0:2.15.0-2.el9_2.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62405",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.4",
    "package" : "golang-0:1.26.7-1.el9_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62753",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.4",
    "package" : "osbuild-composer-0:101.3-4.el9_4.6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62404",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "golang-0:1.26.7-1.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62803",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "osbuild-composer-0:132.2-12.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65336",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "ignition-0:2.21.0-7.el9_6.1"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9:1788361753"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9:1788361758"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-interceptor-rhel9:1788290523"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-operator-rhel9:1788290620"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-scaler-rhel9:1788290333"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle:1788363289"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9:1788361799"
  }, {
    "product_name" : "Custom Metric Autoscaler 2.19",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62866",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator:1788290121"
  }, {
    "product_name" : "Red Hat Developer Hub 1.10",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62851",
    "cpe" : "cpe:/a:redhat:rhdh:1.10::el9",
    "package" : "rhdh/rhdh-rhel9-operator:1788278786"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-14T00:00:00Z",
    "advisory" : "RHSA-2026:54835",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "golang1-26-main-1.26.6-0.1.hum1"
  }, {
    "product_name" : "Red Hat Hardened Images",
    "release_date" : "2026-08-14T00:00:00Z",
    "advisory" : "RHSA-2026:54836",
    "cpe" : "cpe:/a:redhat:hummingbird:1",
    "package" : "golang1-25-main-1.25.13-0.1.hum1"
  }, {
    "product_name" : "Red Hat Multiarch Tuning 1.3.4",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:64827",
    "cpe" : "cpe:/a:redhat:multiarch_tuning_operator:1.3::el9",
    "package" : "multiarch-tuning/multiarch-tuning-rhel9-operator:1788386034"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 3.11.0",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65343",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9",
    "package" : "rhosdt/tempo-rhel9:1788356473"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59548",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787076495"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65106",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/istio-cni-rhel9:1788292951"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65106",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/istio-pilot-rhel9:1788292901"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65106",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788296328"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.0",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65106",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/istio-rhel9-operator:1788292915"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59561",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787092198"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65112",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/istio-cni-rhel9:1788294468"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65112",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/istio-pilot-rhel9:1788294578"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65112",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788294715"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65112",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/istio-rhel9-operator:1788294534"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59554",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787092255"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65113",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/istio-cni-rhel9:1788301003"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65113",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/istio-pilot-rhel9:1788301006"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65113",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788329366"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65113",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/istio-rhel9-operator:1788301001"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59566",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787077108"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65115",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/istio-cni-rhel9:1788301494"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65115",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/istio-pilot-rhel9:1788301650"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65115",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788327866"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65115",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/istio-rhel9-operator:1788301636"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-08-25T00:00:00Z",
    "advisory" : "RHSA-2026:59583",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1787165683"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65121",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/istio-cni-rhel9:1788333736"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65121",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/istio-pilot-rhel9:1788333884"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65121",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/istio-proxyv2-rhel9:1788333924"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.4",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65121",
    "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9",
    "package" : "openshift-service-mesh/istio-rhel9-operator:1788333618"
  }, {
    "product_name" : "Red Hat Quay 3.9",
    "release_date" : "2026-09-08T00:00:00Z",
    "advisory" : "RHSA-2026:65514",
    "cpe" : "cpe:/a:redhat:quay:3.9::el8",
    "package" : "quay/quay-rhel8:1788595574"
  } ],
  "package_state" : [ {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Affected",
    "package_name" : "rhai/assisted-installer-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "AWS Load Balancer Operator",
    "fix_state" : "Affected",
    "package_name" : "albo/aws-load-balancer-operator",
    "cpe" : "cpe:/a:redhat:aws_lb_optr:1"
  }, {
    "product_name" : "AWS Load Balancer Operator",
    "fix_state" : "Not affected",
    "package_name" : "albo/aws-load-balancer-rhel8-operator",
    "cpe" : "cpe:/a:redhat:aws_lb_optr:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-builds/openshift-builds-waiters-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "cert-manager Operator for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "cert-manager/jetstack-cert-manager-rhel9",
    "cpe" : "cpe:/a:redhat:cert_manager:1"
  }, {
    "product_name" : "Compliance Operator",
    "fix_state" : "Affected",
    "package_name" : "compliance/openshift-compliance-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift_compliance_operator:1"
  }, {
    "product_name" : "Confidential Compute Attestation",
    "fix_state" : "Affected",
    "package_name" : "build-of-trustee/trustee-rhel9-operator",
    "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1"
  }, {
    "product_name" : "Cryostat 4",
    "fix_state" : "Affected",
    "package_name" : "cryostat/cryostat-storage-rhel9",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Deployment Validation Operator",
    "fix_state" : "Affected",
    "package_name" : "dvo/deployment-validation-rhel8-operator",
    "cpe" : "cpe:/a:redhat:deployment_validator_operator"
  }, {
    "product_name" : "External Secrets Operator for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "external-secrets-operator/external-secrets-rhel9",
    "cpe" : "cpe:/a:redhat:external_secrets_operator:1"
  }, {
    "product_name" : "Fence Agents Remediation Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/fence-agents-remediation-rhel8-operator",
    "cpe" : "cpe:/a:redhat:workload_availability_far:0"
  }, {
    "product_name" : "File Integrity Operator",
    "fix_state" : "Affected",
    "package_name" : "compliance/openshift-compliance-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift_file_integrity_operator:1"
  }, {
    "product_name" : "Gatekeeper 3",
    "fix_state" : "Affected",
    "package_name" : "gatekeeper/gatekeeper-rhel9-operator",
    "cpe" : "cpe:/a:redhat:gatekeeper:3"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/eventrouter-rhel9",
    "cpe" : "cpe:/a:redhat:logging:6"
  }, {
    "product_name" : "Logical Volume Manager Storage",
    "fix_state" : "Affected",
    "package_name" : "lvms4/lvms-rhel9-operator",
    "cpe" : "cpe:/a:redhat:lvms:4"
  }, {
    "product_name" : "Logical Volume Manager Storage",
    "fix_state" : "Affected",
    "package_name" : "lvms4/topolvm-rhel8",
    "cpe" : "cpe:/a:redhat:lvms:4"
  }, {
    "product_name" : "Logical Volume Manager Storage",
    "fix_state" : "Affected",
    "package_name" : "lvms4/topolvm-rhel9",
    "cpe" : "cpe:/a:redhat:lvms:4"
  }, {
    "product_name" : "Machine Deletion Remediation Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/machine-deletion-remediation-rhel8-operator",
    "cpe" : "cpe:/a:redhat:workload_availability_mdr:0"
  }, {
    "product_name" : "Migration Toolkit for Applications 8",
    "fix_state" : "Affected",
    "package_name" : "mta/mta-cli-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-registry-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "mirror registry for Red Hat OpenShift 2",
    "fix_state" : "Affected",
    "package_name" : "openshift/mirror-registry-rhel8",
    "cpe" : "cpe:/a:redhat:mirror_registry:2"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/discovery-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Affected",
    "package_name" : "multicluster-engine/maestro-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Global Hub",
    "fix_state" : "Affected",
    "package_name" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_globalhub"
  }, {
    "product_name" : "Network Observability Operator",
    "fix_state" : "Affected",
    "package_name" : "network-observability/network-observability-cli-rhel9",
    "cpe" : "cpe:/a:redhat:network_observ_optr:1"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-healthcheck-operator-bundle",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-healthcheck-rhel8-operator",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node Maintenance Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-maintenance-operator-bundle",
    "cpe" : "cpe:/a:redhat:workload_availability_nmo:5"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Affected",
    "package_name" : "oadp/oadp-velero-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Affected",
    "package_name" : "helm",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Affected",
    "package_name" : "openshift-lightspeed/otelcol-lightspeed-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Affected",
    "package_name" : "openshift-pipelines-client",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Affected",
    "package_name" : "openshift-pipelines/pipelines-scheduler-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "kn-workflow-plugin",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "openshift-serverless-1/kn-plugin-event-sender-rhel9",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Affected",
    "package_name" : "openshift-serverless-clients",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Affected",
    "package_name" : "openshift-golang-builder-container",
    "cpe" : "cpe:/a:redhat:service_mesh:3",
    "impact" : "important"
  }, {
    "product_name" : "OpenShift Source-to-Image (S2I)",
    "fix_state" : "Affected",
    "package_name" : "source-to-image/source-to-image-rhel8",
    "cpe" : "cpe:/a:redhat:source_to_image:1"
  }, {
    "product_name" : "Power monitoring for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-power-monitoring/kepler-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_power_monitoring"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Affected",
    "package_name" : "3scale-amp2/3scale-operator-bundle",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Will not fix",
    "package_name" : "flightctl",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "rhacm2/subctl-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "rhacm2/thanos-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Affected",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Affected",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel9",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-26/receptor-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform-27/receptor-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform/platform-operator-bundle",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "automation-gateway-proxy",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "automation-gateway-proxy-openssl30",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "automation-gateway-proxy-openssl32",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "python3.11-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3.11-grpcio",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3.12-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3.12-grpcio",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3x-grpcio",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python-grpcio",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "receptor",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ceph Storage 5",
    "fix_state" : "Affected",
    "package_name" : "rhceph/snmp-notifier-rhel8",
    "cpe" : "cpe:/a:redhat:ceph_storage:5"
  }, {
    "product_name" : "Red Hat Ceph Storage 6",
    "fix_state" : "Affected",
    "package_name" : "rhceph/snmp-notifier-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:6"
  }, {
    "product_name" : "Red Hat Ceph Storage 7",
    "fix_state" : "Affected",
    "package_name" : "rhceph/grafana-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:7"
  }, {
    "product_name" : "Red Hat Ceph Storage 8",
    "fix_state" : "Affected",
    "package_name" : "libarrow",
    "cpe" : "cpe:/a:redhat:ceph_storage:8"
  }, {
    "product_name" : "Red Hat Ceph Storage 8",
    "fix_state" : "Affected",
    "package_name" : "rhceph/grafana-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:8"
  }, {
    "product_name" : "Red Hat Ceph Storage 8",
    "fix_state" : "Affected",
    "package_name" : "thrift",
    "cpe" : "cpe:/a:redhat:ceph_storage:8"
  }, {
    "product_name" : "Red Hat Ceph Storage 9",
    "fix_state" : "Affected",
    "package_name" : "libarrow",
    "cpe" : "cpe:/a:redhat:ceph_storage:9"
  }, {
    "product_name" : "Red Hat Ceph Storage 9",
    "fix_state" : "Affected",
    "package_name" : "rhceph/alloy-rhel10",
    "cpe" : "cpe:/a:redhat:ceph_storage:9"
  }, {
    "product_name" : "Red Hat Ceph Storage 9",
    "fix_state" : "Affected",
    "package_name" : "thrift",
    "cpe" : "cpe:/a:redhat:ceph_storage:9"
  }, {
    "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "redhat-certification-cnf",
    "cpe" : "cpe:/a:redhat:certifications:9"
  }, {
    "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "redhat-certification-preflight",
    "cpe" : "cpe:/a:redhat:certifications:9"
  }, {
    "product_name" : "Red Hat Connectivity Link 1",
    "fix_state" : "Affected",
    "package_name" : "rhcl-1/coredns-rhel9",
    "cpe" : "cpe:/a:redhat:connectivity_link:1"
  }, {
    "product_name" : "Red Hat Edge Manager 1",
    "fix_state" : "Affected",
    "package_name" : "flightctl",
    "cpe" : "cpe:/a:redhat:edge_manager:1"
  }, {
    "product_name" : "Red Hat Edge Manager 1",
    "fix_state" : "Affected",
    "package_name" : "rhem/flightctl-ui-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "butane",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "delve",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "gvisor-tap-vsock",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "ignition",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Will not fix",
    "package_name" : "oci-delta",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "osbuild-composer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "rhc-worker-playbook",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "toolbox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "trustee",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "trustee-guest-components",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "yggdrasil",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "compat-sap-c++-11",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Affected",
    "package_name" : "host-metering",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Affected",
    "package_name" : "rhc",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Affected",
    "package_name" : "rhc-worker-script",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "compat-sap-c++-11",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "git-lfs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "osbuild-composer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "weldr-client",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "butane",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "containernetworking-plugins",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "delve",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "git-lfs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "gvisor-tap-vsock",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "ignition",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "image-builder",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Will not fix",
    "package_name" : "oci-delta",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "runc",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "skopeo",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "toolbox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "trustee-guest-components",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "weldr-client",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "golang",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Lightspeed for Runtimes Operator",
    "fix_state" : "Affected",
    "package_name" : "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
    "cpe" : "cpe:/a:redhat:lightspeed_for_runtimes:1"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/rhai-cli-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Cluster Manager CLI",
    "fix_state" : "Affected",
    "package_name" : "ocm-cli-clients/ocm-cli-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "butane",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "conmon-rs",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "containernetworking-plugins",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "cri-o",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "cri-tools",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "golang-github-prometheus-promu",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "ignition",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "kata-containers",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "microshift",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/frr-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-cli",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift-clients",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift-golang-builder-container",
    "cpe" : "cpe:/a:redhat:openshift:4",
    "impact" : "important"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift-kuryr",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "ose-aws-ecr-image-credential-provider",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "ose-azure-acr-image-credential-provider",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "ose-crio-credential-provider",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "ose-gcp-gcr-image-credential-provider",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "podman",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "runc",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "skopeo",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "toolbox",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Affected",
    "package_name" : "odf4/cephcsi-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Affected",
    "package_name" : "devspaces/udi-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Workspaces Operator",
    "fix_state" : "Affected",
    "package_name" : "devworkspace/devworkspace-rhel9-operator",
    "cpe" : "cpe:/a:redhat:devworkspace"
  }, {
    "product_name" : "Red Hat OpenShift for Windows Containers",
    "fix_state" : "Affected",
    "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator",
    "cpe" : "cpe:/a:redhat:windows_machine_config"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "microshift-gitops",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/dex-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/dex-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Not affected",
    "package_name" : "openshift-gitops-argocd-cli",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift on AWS",
    "fix_state" : "Affected",
    "package_name" : "rosa",
    "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/kubemacpool-rhel9",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "openshift-golang-builder-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4",
    "impact" : "important"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Affected",
    "package_name" : "collectd-sensubility",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Affected",
    "package_name" : "etcd",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Affected",
    "package_name" : "golang-github-infrawatch-apputils",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Affected",
    "package_name" : "golang-qpid-apache",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Not affected",
    "package_name" : "qpid-proton",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Affected",
    "package_name" : "rhosp-rhel8/osp-director-agent",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Not affected",
    "package_name" : "collectd-libpod-stats",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Affected",
    "package_name" : "etcd",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Affected",
    "package_name" : "golang-github-infrawatch-apputils",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Affected",
    "package_name" : "golang-qpid-apache",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Not affected",
    "package_name" : "qpid-proton",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Affected",
    "package_name" : "rhosp-rhel9/osp-director-agent",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 18.0",
    "fix_state" : "Affected",
    "package_name" : "golang-github-openstack-k8s-operators-os-diff",
    "cpe" : "cpe:/a:redhat:openstack:18.0"
  }, {
    "product_name" : "Red Hat OpenStack Platform 18.0",
    "fix_state" : "Affected",
    "package_name" : "rhoso-operators/sg-core-rhel9",
    "cpe" : "cpe:/a:redhat:openstack:18.0"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-rhel9",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "satellite/iop-vmaas-rhel9",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "yggdrasil-worker-forwarder",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite Client",
    "fix_state" : "Affected",
    "package_name" : "foreman_ygg_worker",
    "cpe" : "cpe:/a:redhat:rhel_satellite_client:6::el7"
  }, {
    "product_name" : "Red Hat Satellite Client",
    "fix_state" : "Affected",
    "package_name" : "yggdrasil",
    "cpe" : "cpe:/a:redhat:rhel_satellite_client:6::el7"
  }, {
    "product_name" : "Red Hat Service Interconnect 2",
    "fix_state" : "Affected",
    "package_name" : "service-interconnect/skupper-cli-rhel9",
    "cpe" : "cpe:/a:redhat:service_interconnect:2"
  }, {
    "product_name" : "Red Hat Service Interconnect 2",
    "fix_state" : "Affected",
    "package_name" : "skupper-cli",
    "cpe" : "cpe:/a:redhat:service_interconnect:2"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer",
    "fix_state" : "Affected",
    "package_name" : "rhtas/ec-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1"
  }, {
    "product_name" : "Red Hat Web Terminal",
    "fix_state" : "Affected",
    "package_name" : "web-terminal/web-terminal-exec-rhel9",
    "cpe" : "cpe:/a:redhat:webterminal:1"
  }, {
    "product_name" : "Secrets Management Console for Red Hat OpenShift",
    "fix_state" : "Will not fix",
    "package_name" : "external-secrets-management/console-plugin-operator-rhel9",
    "cpe" : "cpe:/a:redhat:secrets_management_console:0"
  }, {
    "product_name" : "Security Profiles Operator",
    "fix_state" : "Affected",
    "package_name" : "compliance/openshift-selinuxd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1"
  }, {
    "product_name" : "Service Telemetry Framework 1.5",
    "fix_state" : "Affected",
    "package_name" : "stf/sg-core-rhel9",
    "cpe" : "cpe:/a:redhat:stf:1.5"
  }, {
    "product_name" : "streams for Apache Kafka 2",
    "fix_state" : "Affected",
    "package_name" : "golang-github-danielqsj-kafka_exporter",
    "cpe" : "cpe:/a:redhat:amq_streams:2"
  }, {
    "product_name" : "streams for Apache Kafka 3",
    "fix_state" : "Affected",
    "package_name" : "golang-github-danielqsj-kafka_exporter",
    "cpe" : "cpe:/a:redhat:amq_streams:3"
  }, {
    "product_name" : "Zero Trust Workload Identity Manager",
    "fix_state" : "Will not fix",
    "package_name" : "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
    "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
  }, {
    "product_name" : "Zero Trust Workload Identity Manager - Tech Preview",
    "fix_state" : "Will not fix",
    "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
    "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-33818\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33818\nhttps://go.dev/cl/814980\nhttps://go.dev/issue/80405\nhttps://groups.google.com/g/golang-announce/c/94pEornpRlI\nhttps://pkg.go.dev/vuln/GO-2026-5972" ],
  "name" : "CVE-2026-33818",
  "csaw" : false
}