{ "threat_severity" : "Important", "public_date" : "2026-07-21T19:18:59Z", "bugzilla" : { "description" : "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input", "id" : "2504233", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2504233" }, "cvss3" : { "cvss3_base_score" : "7.5", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status" : "verified" }, "cwe" : "CWE-835", "details" : [ "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.", "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive." ], "statement" : "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.", "affected_release" : [ { "product_name" : "Cert Manager support for Red Hat OpenShift release 1.19", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63135", "cpe" : "cpe:/a:redhat:cert_manager:1.19::el9", "package" : "cert-manager/cert-manager-operator-rhel9:1788348522", "impact" : "important" }, { "product_name" : "Cert Manager support for Red Hat OpenShift release 1.19", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63138", "cpe" : "cpe:/a:redhat:cert_manager:1.19::el9", "package" : "cert-manager/jetstack-cert-manager-acmesolver-rhel9:1788348571", "impact" : "important" }, { "product_name" : "Cert Manager support for Red Hat OpenShift release 1.19", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63138", "cpe" : "cpe:/a:redhat:cert_manager:1.19::el9", "package" : "cert-manager/jetstack-cert-manager-rhel9:1788348571", "impact" : "important" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-08-31T00:00:00Z", "advisory" : "RHSA-2026:61314", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/perses-rhel9:1787593946" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9:1788361753", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9:1788361758", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-interceptor-rhel9:1788290523", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-operator-rhel9:1788290620", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-scaler-rhel9:1788290333", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle:1788363289", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9:1788361799", "impact" : "important" }, { "product_name" : "Custom Metric Autoscaler 2.19", "release_date" : "2026-09-02T00:00:00Z", "advisory" : "RHSA-2026:62866", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9", "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator:1788290121", "impact" : "important" }, { "product_name" : "external secrets operator for Red Hat OpenShift 1.1", "release_date" : "2026-08-13T00:00:00Z", "advisory" : "RHSA-2026:54525", "cpe" : "cpe:/a:redhat:external_secrets_operator:1.1::el9", "package" : "external-secrets-operator/external-secrets-rhel9:1786614676", "impact" : "important" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift 6.5", "release_date" : "2026-08-18T00:00:00Z", "advisory" : "RHSA-2026:56340", "cpe" : "cpe:/a:redhat:logging:6.5::el9", "package" : "openshift-logging/eventrouter-rhel9:1786645107", "impact" : "important" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.11", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60387", "cpe" : "cpe:/a:redhat:acm:2.11::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787683560" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.11", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60387", "cpe" : "cpe:/a:redhat:acm:2.11::el9", "package" : "rhacm2/insights-client-rhel9:1787688993" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.11", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60387", "cpe" : "cpe:/a:redhat:acm:2.11::el9", "package" : "rhacm2/insights-metrics-rhel9:1787681737" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.11", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60387", "cpe" : "cpe:/a:redhat:acm:2.11::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1787685854" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60390", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787266564" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60390", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/insights-client-rhel9:1787259125" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60390", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/insights-metrics-rhel9:1787259092" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60390", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1787259073" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60388", "cpe" : "cpe:/a:redhat:acm:2.14::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787266564" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60388", "cpe" : "cpe:/a:redhat:acm:2.14::el9", "package" : "rhacm2/insights-client-rhel9:1786882244" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60388", "cpe" : "cpe:/a:redhat:acm:2.14::el9", "package" : "rhacm2/insights-metrics-rhel9:1786646569" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.14", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60388", "cpe" : "cpe:/a:redhat:acm:2.14::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1786969946" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/acm-search-indexer-rhel9:1787249293" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/acm-search-v2-api-rhel9:1787238618" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/acm-search-v2-rhel9:1787681674" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787266360" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/insights-client-rhel9:1787238585" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/insights-metrics-rhel9:1787238556" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/klusterlet-addon-controller-rhel9:1787276537" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1787238539" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/multicluster-role-assignment-rhel9:1787238585" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.15", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60389", "cpe" : "cpe:/a:redhat:acm:2.15::el9", "package" : "rhacm2/search-collector-rhel9:1787238613" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.16", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60391", "cpe" : "cpe:/a:redhat:acm:2.16::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787266564" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.16", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60391", "cpe" : "cpe:/a:redhat:acm:2.16::el9", "package" : "rhacm2/insights-client-rhel9:1787184541" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.16", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60391", "cpe" : "cpe:/a:redhat:acm:2.16::el9", "package" : "rhacm2/insights-metrics-rhel9:1787086830" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.16", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60391", "cpe" : "cpe:/a:redhat:acm:2.16::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1786969938" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.17", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60386", "cpe" : "cpe:/a:redhat:acm:2.17::el9", "package" : "rhacm2/acm-volsync-addon-controller-rhel9:1787266556" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.17", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60386", "cpe" : "cpe:/a:redhat:acm:2.17::el9", "package" : "rhacm2/insights-client-rhel9:1787227689" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.17", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60386", "cpe" : "cpe:/a:redhat:acm:2.17::el9", "package" : "rhacm2/insights-metrics-rhel9:1787227665" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.17", "release_date" : "2026-08-26T00:00:00Z", "advisory" : "RHSA-2026:60386", "cpe" : "cpe:/a:redhat:acm:2.17::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1787227654" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:40964", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-25-main-1.25.12-1.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41020", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-26-main-1.26.5-0.1.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42083", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "grype-main-0.116.0-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42230", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "helm4-main-4.2.3-0.1.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42241", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "helm3-main-3.21.3-0.1.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:43015", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "syft-main-1.49.0-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43119", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "skopeo-main-1.23.0-3.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43311", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "spire1-14-main-1.14.7-0.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43554", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "opentofu1-11-main-1.11.13-0.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43581", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "opentelemetry-collector-contrib-main-0.157.0-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43716", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "yq-main-4.53.3-2.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43797", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "oauth2-proxy-main-7.15.3-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43799", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "opentelemetry-collector-main-0.157.0-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43801", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "jaeger-main-2.20.0-0.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43803", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "opentofu1-10-main-1.10.10-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43852", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "kubernetes1-35-main-1.35.6-2.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43866", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "prometheus3-13-main-3.13.1-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43873", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "hugo-main-0.164.0-0.1.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-22T00:00:00Z", "advisory" : "RHSA-2026:43906", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "kubernetes1-36-main-1.36.2-6.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44151", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "caddy-main-2.11.4-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44152", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "podman-main-6.0.2-2.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44162", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "spire1-15-main-1.15.2-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44430", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "etcd-main-3.7.0-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44451", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "cosign-main-3.1.2-0.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-23T00:00:00Z", "advisory" : "RHSA-2026:44479", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "prometheus3-5-main-3.5.5-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-27T00:00:00Z", "advisory" : "RHSA-2026:46953", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "go-fdo-client-main-1.0.0-2.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-27T00:00:00Z", "advisory" : "RHSA-2026:46960", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "opentofu1-12-main-1.12.5-0.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-27T00:00:00Z", "advisory" : "RHSA-2026:46988", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "trivy-main-0.72.0-0.1.2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-29T00:00:00Z", "advisory" : "RHSA-2026:48306", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "go-fdo-server-main-1.0.1-0.5.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-07-31T00:00:00Z", "advisory" : "RHSA-2026:49317", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "prometheus3-13-main-3.13.2-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-01T00:00:00Z", "advisory" : "RHSA-2026:49360", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "buildah-main-1.44.0-3.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-06T00:00:00Z", "advisory" : "RHSA-2026:51065", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "buildah-main-1.45.0-2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-10T00:00:00Z", "advisory" : "RHSA-2026:52912", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "skopeo-main-1.24.0-2.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-12T00:00:00Z", "advisory" : "RHSA-2026:54364", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "cosign-main-3.1.2-0.3.hum1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-08-13T00:00:00Z", "advisory" : "RHSA-2026:54549", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "hugo-main-0.165.0-0.1.hum1", "impact" : "important" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/cephcsi-rhel9:1788162216" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/cephcsi-rhel9-operator:1788161757" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/devicefinder-rhel9:1788162237" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/mcg-core-rhel9:1788162644" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/mcg-rhel9-operator:1788162674" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-client-console-rhel9:1788163152" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-client-rhel9-operator:1788162698" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1788163060" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-rhel9-operator:1788163064" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-blackbox-exporter-rhel9:1788163005" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cli-rhel9:1788163238" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1788163127" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-console-rhel9:1788164027" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1788163231" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1788165796" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1788163305" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-drbd-rhel9:1788163607" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-external-snapshotter-rhel9-operator:1788163696" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-external-snapshotter-sidecar-rhel9:1788163691" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-lightspeed-rag-content-rhel9:1788163742" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-multicluster-console-rhel9:1788164126" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1788163839" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-must-gather-rhel9:1788164031" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-rhel9-operator:1788164121" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-rhel9-operator:1788164141" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-volsync-plugin-mover-rhel9:1788164576" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-volsync-plugin-rhel9-operator:1788164736" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65130", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/rook-ceph-rhel9-operator:1788164857" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.10.2", "release_date" : "2026-08-13T00:00:00Z", "advisory" : "RHSA-2026:54773", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9", "package" : "rhosdt/opentelemetry-rhel9-operator:1786635175", "impact" : "important" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.11.0", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65343", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9", "package" : "rhosdt/tempo-rhel9:1788356473", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59548", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787076495", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59561", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787092198", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59554", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787092255", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59566", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787077108", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.4", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59583", "cpe" : "cpe:/a:redhat:service_mesh:3.4::el9", "package" : "openshift-service-mesh/kiali-rhel9:1787165683", "impact" : "important" }, { "product_name" : "Red Hat Quay 3.15", "release_date" : "2026-09-03T00:00:00Z", "advisory" : "RHSA-2026:63307", "cpe" : "cpe:/a:redhat:quay:3.15::el8", "package" : "quay/quay-rhel8:1788191755", "impact" : "important" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-09-08T00:00:00Z", "advisory" : "RHSA-2026:65514", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1788595574", "impact" : "important" } ], "package_state" : [ { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Not affected", "package_name" : "rhai/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "AWS Load Balancer Operator", "fix_state" : "Affected", "package_name" : "albo/aws-load-balancer-rhel9-operator", "cpe" : "cpe:/a:redhat:aws_lb_optr:1", "impact" : "important" }, { "product_name" : "Builds for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-builds/openshift-builds-waiters-rhel9", "cpe" : "cpe:/a:redhat:openshift_builds:1" }, { "product_name" : "Compliance Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-rhel8-operator", "cpe" : "cpe:/a:redhat:openshift_compliance_operator:1", "impact" : "important" }, { "product_name" : "Confidential Compute Attestation", "fix_state" : "Affected", "package_name" : "build-of-trustee/trustee-rhel9-operator", "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1", "impact" : "important" }, { "product_name" : "Cost Management Metrics Operator", "fix_state" : "Not affected", "package_name" : "costmanagement/costmanagement-metrics-rhel9-operator", "cpe" : "cpe:/a:redhat:cost_management:4" }, { "product_name" : "Cryostat 4", "fix_state" : "Not affected", "package_name" : "cryostat/cryostat-storage-rhel9", "cpe" : "cpe:/a:redhat:cryostat:4" }, { "product_name" : "Deployment Validation Operator", "fix_state" : "Affected", "package_name" : "dvo/deployment-validation-rhel8-operator", "cpe" : "cpe:/a:redhat:deployment_validator_operator", "impact" : "important" }, { "product_name" : "Exploit Intelligence", "fix_state" : "Not affected", "package_name" : "exploit-intelligence-tech-preview/agent-client-rhel9", "cpe" : "cpe:/a:redhat:exploit_intelligence:0" }, { "product_name" : "ExternalDNS Operator", "fix_state" : "Affected", "package_name" : "edo/external-dns-rhel8", "cpe" : "cpe:/a:redhat:ext_dns_optr:1", "impact" : "important" }, { "product_name" : "ExternalDNS Operator", "fix_state" : "Not affected", "package_name" : "edo/external-dns-rhel9", "cpe" : "cpe:/a:redhat:ext_dns_optr:1" }, { "product_name" : "Fence Agents Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/fence-agents-remediation-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_far:0", "impact" : "important" }, { "product_name" : "Fence Agents Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/fence-agents-remediation-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_far:0", "impact" : "important" }, { "product_name" : "File Integrity Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-openscap-rhel8", "cpe" : "cpe:/a:redhat:openshift_file_integrity_operator:1", "impact" : "important" }, { "product_name" : "Gatekeeper 3", "fix_state" : "Affected", "package_name" : "gatekeeper/gatekeeper-rhel9", "cpe" : "cpe:/a:redhat:gatekeeper:3", "impact" : "important" }, { "product_name" : "Job Set 1", "fix_state" : "Affected", "package_name" : "job-set/jobset-rhel9", "cpe" : "cpe:/a:redhat:job_set:1", "impact" : "important" }, { "product_name" : "Job Set Tech Preview", "fix_state" : "Affected", "package_name" : "job-set/jobset-rhel9", "cpe" : "cpe:/a:redhat:job_set:0", "impact" : "important" }, { "product_name" : "Kernel Module Management Operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "kmm/kernel-module-management-worker-rhel9", "cpe" : "cpe:/a:redhat:kernel_module_management:2", "impact" : "important" }, { "product_name" : "Kube Descheduler Operator", "fix_state" : "Affected", "package_name" : "kube-descheduler-operator/descheduler-rhel9", "cpe" : "cpe:/a:redhat:kube_descheduler_operator:5", "impact" : "important" }, { "product_name" : "Leader Worker Set", "fix_state" : "Affected", "package_name" : "leader-worker-set/lws-rhel9", "cpe" : "cpe:/a:redhat:leader_worker_set:1", "impact" : "important" }, { "product_name" : "Lightspeed Core", "fix_state" : "Affected", "package_name" : "lightspeed-core/rag-tool-cpu-rhel9", "cpe" : "cpe:/a:redhat:lightspeed_core" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Not affected", "package_name" : "lvms4/lvms-rhel9-operator", "cpe" : "cpe:/a:redhat:lvms:4", "impact" : "important" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Not affected", "package_name" : "lvms4/topolvm-rhel8", "cpe" : "cpe:/a:redhat:lvms:4", "impact" : "important" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Not affected", "package_name" : "lvms4/topolvm-rhel9", "cpe" : "cpe:/a:redhat:lvms:4", "impact" : "important" }, { "product_name" : "Machine Deletion Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/machine-deletion-remediation-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_mdr:0", "impact" : "important" }, { "product_name" : "Machine Deletion Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/machine-deletion-remediation-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_mdr:0", "impact" : "important" }, { "product_name" : "MCP Lifecycle Operator", "fix_state" : "Not affected", "package_name" : "mcp-lifecycle-operator-beta/mcp-lifecycle-rhel9-operator", "cpe" : "cpe:/a:redhat:mcp_lifecycle_operator:0", "impact" : "important" }, { "product_name" : "MCP Server for Red Hat OpenShift", "fix_state" : "Will not fix", "package_name" : "openshift-mcp-beta/openshift-mcp-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_mcp_server:0", "impact" : "important" }, { "product_name" : "MCP Server for Red Hat OpenShift", "fix_state" : "Will not fix", "package_name" : "openshift-mcp-tech-preview/openshift-mcp-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_mcp_server:0", "impact" : "important" }, { "product_name" : "Migration Toolkit for Applications 8", "fix_state" : "Affected", "package_name" : "mta/mta-cli-rhel9", "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8", "impact" : "important" }, { "product_name" : "Migration Toolkit for Containers", "fix_state" : "Affected", "package_name" : "rhmtc/openshift-migration-registry-rhel8", "cpe" : "cpe:/a:redhat:rhmt:1", "impact" : "important" }, { "product_name" : "Migration Toolkit for Virtualization", "fix_state" : "Affected", "package_name" : "migration-toolkit-virtualization/mtv-api-rhel9", "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2", "impact" : "important" }, { "product_name" : "Multiarch Tuning Operator", "fix_state" : "Not affected", "package_name" : "multiarch-tuning/multiarch-tuning-rhel9-operator", "cpe" : "cpe:/a:redhat:multiarch_tuning_operator" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/addon-manager-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-service-9-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/backplane-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/capoa-bootstrap-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/capoa-control-plane-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-aws-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-kubevirt-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/clusterclaims-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-curator-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-proxy-addon-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-proxy-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/hive-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine", "impact" : "important" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/hypershift-addon-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/hypershift-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/image-based-install-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/kube-rbac-proxy-mce-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/managedcluster-import-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/managed-serviceaccount-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/mce-capi-webhook-config-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/multicloud-manager-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/placement-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/provider-credential-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/registration-operator-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/registration-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/work-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub", "impact" : "important" }, { "product_name" : "Network Observability Operator", "fix_state" : "Affected", "package_name" : "network-observability/network-observability-cli-rhel9", "cpe" : "cpe:/a:redhat:network_observ_optr:1", "impact" : "important" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0", "impact" : "important" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0", "impact" : "important" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0", "impact" : "important" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0", "impact" : "important" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-remediation-console-rhel9", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0", "impact" : "important" }, { "product_name" : "Node Maintenance Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-maintenance-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_nmo:5", "impact" : "important" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Affected", "package_name" : "oadp/oadp-velero-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1", "impact" : "important" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Not affected", "package_name" : "ocp-tools-4/jenkins-rhel8", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Not affected", "package_name" : "ocp-tools-4/jenkins-rhel9", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Not affected", "package_name" : "openshift-lightspeed/otelcol-lightspeed-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines-client", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-opc-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Run Once Duration Override Operator", "fix_state" : "Affected", "package_name" : "run-once-duration-override-operator/run-once-duration-override-rhel9", "cpe" : "cpe:/a:redhat:run_once_duration_override_operator:1", "impact" : "important" }, { "product_name" : "OpenShift Secondary Scheduler Operator", "fix_state" : "Affected", "package_name" : "openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_secondary_scheduler:1", "impact" : "important" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "kn-workflow-plugin", "cpe" : "cpe:/a:redhat:serverless:1", "impact" : "important" }, { "product_name" : "Pen Drive Powered by Red Hat Lightspeed", "fix_state" : "Affected", "package_name" : "pen-drive/pen-drive-scanner-rhel9", "cpe" : "cpe:/a:redhat:pdrive_lightspeed:1", "impact" : "important" }, { "product_name" : "Power monitoring for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-power-monitoring/kepler-rhel9", "cpe" : "cpe:/a:redhat:openshift_power_monitoring", "impact" : "important" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Not affected", "package_name" : "3scale-amp2/3scale-rhel7-operator", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Not affected", "package_name" : "3scale-amp2/3scale-rhel9-operator", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-permission-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2.13/thanos-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/acm-governance-policy-addon-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/acm-governance-policy-framework-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-grafana-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-multicluster-observability-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/acm-must-gather-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-prometheus-config-reloader-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-prometheus-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/cert-policy-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/cluster-backup-rhel9-operator", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/config-policy-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/endpoint-monitoring-rhel9-operator", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/governance-policy-propagator-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/grafana-dashboard-loader-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/memcached-exporter-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/metrics-collector-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/mtv-integrations-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicloud-integrations-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-observability-rhel9-operator", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-application-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-channel-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-subscription-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/node-exporter-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/observatorium-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/observatorium-rhel9-operator", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/prometheus-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/rbac-query-proxy-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/subctl-rhel9", "cpe" : "cpe:/a:redhat:acm:2", "impact" : "important" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/submariner-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/thanos-receive-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/thanos-rhel9", "cpe" : "cpe:/a:redhat:acm:2", "impact" : "important" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Will not fix", "package_name" : "rhacm2/volsync-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Will not fix", "package_name" : "advanced-cluster-security/rhacs-main-rhel8", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4", "impact" : "important" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Will not fix", "package_name" : "advanced-cluster-security/rhacs-main-rhel9", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4", "impact" : "important" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Not affected", "package_name" : "rhaiis/vllm-cpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-24/ee-supported-rhel8", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-25/receptor-rhel8", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-26/hub-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-27/hub-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Build of Kueue", "fix_state" : "Not affected", "package_name" : "kueue/kueue-rhel9", "cpe" : "cpe:/a:redhat:kueue_operator:1", "impact" : "important" }, { "product_name" : "Red Hat Build of Podman Desktop", "fix_state" : "Affected", "package_name" : "rh-podman-desktop.git", "cpe" : "cpe:/a:redhat:podman_desktop:1" }, { "product_name" : "Red Hat Ceph Storage 5", "fix_state" : "Not affected", "package_name" : "rhceph/snmp-notifier-rhel8", "cpe" : "cpe:/a:redhat:ceph_storage:5" }, { "product_name" : "Red Hat Ceph Storage 6", "fix_state" : "Not affected", "package_name" : "rhceph/snmp-notifier-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:6" }, { "product_name" : "Red Hat Ceph Storage 7", "fix_state" : "Not affected", "package_name" : "rhceph/grafana-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:7" }, { "product_name" : "Red Hat Ceph Storage 8", "fix_state" : "Not affected", "package_name" : "rhceph/grafana-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:8" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Not affected", "package_name" : "rhceph/alloy-rhel10", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "redhat-certification-cnf", "cpe" : "cpe:/a:redhat:certifications:9" }, { "product_name" : "Red Hat Connectivity Link 1", "fix_state" : "Affected", "package_name" : "rhcl-1/coredns-rhel9", "cpe" : "cpe:/a:redhat:connectivity_link:1", "impact" : "important" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Affected", "package_name" : "rhdh/rhdh-hub-rhel9", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Edge Manager 1", "fix_state" : "Affected", "package_name" : "flightctl", "cpe" : "cpe:/a:redhat:edge_manager:1", "impact" : "important" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "podman", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Affected", "package_name" : "rhc", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "rhc", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "git-lfs", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "containers-common", "cpe" : "cpe:/a:redhat:hummingbird:1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "gcc", "cpe" : "cpe:/a:redhat:hummingbird:1", "impact" : "important" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "rust", "cpe" : "cpe:/a:redhat:hummingbird:1", "impact" : "important" }, { "product_name" : "Red Hat Lightspeed for Runtimes Operator", "fix_state" : "Not affected", "package_name" : "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator", "cpe" : "cpe:/a:redhat:lightspeed_for_runtimes:1" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/rhai-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Cluster Manager CLI", "fix_state" : "Affected", "package_name" : "ocm-cli-clients/ocm-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "cri-o", "cpe" : "cpe:/a:redhat:openshift:4", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-kube-rbac-proxy-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-vertical-pod-autoscaler-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-vertical-pod-autoscaler-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Dev Spaces", "fix_state" : "Affected", "package_name" : "devspaces/udi-rhel9", "cpe" : "cpe:/a:redhat:openshift_devspaces:3" }, { "product_name" : "Red Hat OpenShift Dev Workspaces Operator", "fix_state" : "Affected", "package_name" : "devworkspace/devworkspace-rhel9-operator", "cpe" : "cpe:/a:redhat:devworkspace" }, { "product_name" : "Red Hat OpenShift for Windows Containers", "fix_state" : "Affected", "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator", "cpe" : "cpe:/a:redhat:windows_machine_config", "impact" : "important" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/dex-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/dex-rhel9", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift on AWS", "fix_state" : "Affected", "package_name" : "rosa", "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Update Service", "fix_state" : "Affected", "package_name" : "openshift-update-service/openshift-update-service-rhel8-operator", "cpe" : "cpe:/a:redhat:openshift_update_service:5", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-api", "cpe" : "cpe:/a:redhat:container_native_virtualization:4", "impact" : "important" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-api-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4", "impact" : "important" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Affected", "package_name" : "etcd", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Not affected", "package_name" : "rhosp-rhel9/osp-director-agent", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Not affected", "package_name" : "golang-github-openstack-k8s-operators-os-diff", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-rhel9", "cpe" : "cpe:/a:redhat:quay:3", "impact" : "important" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "satellite/iop-vmaas-rhel9", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "yggdrasil-worker-forwarder", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Service Interconnect 2", "fix_state" : "Not affected", "package_name" : "skupper-cli", "cpe" : "cpe:/a:redhat:service_interconnect:2" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/ec-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Profile Analyzer", "fix_state" : "Not affected", "package_name" : "rhtpa/rhtpa-rhel9-operator", "cpe" : "cpe:/a:redhat:trusted_profile_analyzer:2" }, { "product_name" : "Red Hat Trusted Profile Analyzer", "fix_state" : "Not affected", "package_name" : "rhtpa/rhtpa-rhel10-operator", "cpe" : "cpe:/a:redhat:trusted_profile_analyzer:3" }, { "product_name" : "Red Hat Web Terminal", "fix_state" : "Affected", "package_name" : "web-terminal/web-terminal-exec-rhel9", "cpe" : "cpe:/a:redhat:webterminal:1" }, { "product_name" : "Secrets Management Console for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-management/console-plugin-operator-rhel9", "cpe" : "cpe:/a:redhat:secrets_management_console:0", "impact" : "important" }, { "product_name" : "Security Profiles Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-selinuxd-rhel8", "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1", "impact" : "important" }, { "product_name" : "Self Node Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/self-node-remediation-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_snr:0", "impact" : "important" }, { "product_name" : "Self Node Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/self-node-remediation-rhel9-operator", "cpe" : "cpe:/a:redhat:workload_availability_snr:0", "impact" : "important" }, { "product_name" : "Service Telemetry Framework 1.5", "fix_state" : "Affected", "package_name" : "stf/smart-gateway-rhel9-operator", "cpe" : "cpe:/a:redhat:stf:1.5", "impact" : "important" }, { "product_name" : "Storage-Based Remediation", "fix_state" : "Affected", "package_name" : "workload-availability/storage-based-remediation-agent-rhel9", "cpe" : "cpe:/a:redhat:workload_availability_sbr:0", "impact" : "important" }, { "product_name" : "streams for Apache Kafka 2", "fix_state" : "Not affected", "package_name" : "golang-github-danielqsj-kafka_exporter", "cpe" : "cpe:/a:redhat:amq_streams:2" }, { "product_name" : "streams for Apache Kafka 3", "fix_state" : "Not affected", "package_name" : "golang-github-danielqsj-kafka_exporter", "cpe" : "cpe:/a:redhat:amq_streams:3" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1", "impact" : "important" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0", "impact" : "important" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-56852\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56852\nhttps://go.dev/cl/794100\nhttps://go.dev/issue/80142\nhttps://pkg.go.dev/vuln/GO-2026-5970" ], "name" : "CVE-2026-56852", "mitigation" : { "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "lang" : "en:us" }, "csaw" : false }