Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-42151 (GCVE-0-2026-42151)
Vulnerability from cvelistv5 – Published: 2026-05-04 18:12 – Updated: 2026-07-20 12:05
VLAI
EPSS
VEX
Title
Prometheus Azure AD remote write OAuth client secret exposed via config API
Summary
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
29 references
Impacted products
73 products
| Vendor | Product | Version | |
|---|---|---|---|
| prometheus | prometheus |
Affected:
< 3.5.3
Affected: >= 3.6.0, < 3.11.3 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1:el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502022 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502465 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502025 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502494 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502401 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502403 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502023 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502029 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502445 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194638 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194353 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784196588 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784195620 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194309 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194144 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194188 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194653 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194980 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194347 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194971 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128388 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128860 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126780 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127787 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126832 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126774 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127791 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127135 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126733 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127775 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
2.19.0-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
0.153.0-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat multicluster global hub 1.4.3 |
Unaffected:
1784060681 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968861 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968468 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783960127 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783329793 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783326748 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2 |
|
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6 |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5 |
|
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6 |
|
| Red Hat | Red Hat Ceph Storage 7 |
cpe:/a:redhat:ceph_storage:7 |
|
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8 |
|
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-42151",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-04T19:54:39.314002Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-04T19:55:09.255Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1:el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502465",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502025",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502401",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502023",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502029",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502445",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194638",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784196588",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784195620",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194309",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194188",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194653",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194980",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194971",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128388",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128860",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126780",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127787",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126832",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126774",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126733",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127775",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "jaeger-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2.19.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0.153.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector-contrib-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0.153.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Red Hat multicluster global hub 1.4.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784060681",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968468",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783960127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783326748",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-must-gather-rhel8",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-openscap-rhel8",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-rhel8-operator",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-file-integrity-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-file-integrity-rhel8-operator",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/opa-openshift-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-ebpf-agent-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-flowlogs-pipeline-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-rhel8-operator",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/grafana-dashboard-loader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/metrics-collector-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/obo-prometheus-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/observatorium-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/rbac-query-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-receive-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-5-dashboard-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-6-dashboard-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-agent-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-router-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-metrics-server-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-metrics-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/microshift-bootc-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cluster-monitoring-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cluster-monitoring-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-config-reloader",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-config-reloader-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prom-label-proxy",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prom-label-proxy-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-thanos-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-thanos-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ztp-site-generate-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-target-allocator-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-opa-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-operator-bundle",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-04T18:12:16.917Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-256",
"description": "Plaintext Storage of a Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-20T12:05:01.294Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"name": "RHBZ#2466507",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25039"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25245"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40970"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37267"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:25039: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:25504: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:25245: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-04T19:02:26.983Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-04T18:12:16.917Z",
"value": "Made public."
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "prometheus",
"vendor": "prometheus",
"versions": [
{
"status": "affected",
"version": "\u003c 3.5.3"
},
{
"status": "affected",
"version": "\u003e= 3.6.0, \u003c 3.11.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "CWE-312: Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-04T18:12:16.917Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
},
{
"name": "https://github.com/prometheus/prometheus/pull/18587",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"name": "https://github.com/prometheus/prometheus/pull/18590",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"name": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"name": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
}
],
"source": {
"advisory": "GHSA-wg65-39gg-5wfj",
"discovery": "UNKNOWN"
},
"title": "Prometheus Azure AD remote write OAuth client secret exposed via config API"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-42151",
"datePublished": "2026-05-04T18:12:16.917Z",
"dateReserved": "2026-04-24T17:15:21.835Z",
"dateUpdated": "2026-07-20T12:05:01.294Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-42151",
"date": "2026-07-20",
"epss": "0.00326",
"percentile": "0.24792"
},
"microsoft_vex": {
"current_release_date": "2026-06-03T01:50:26.000Z",
"cve": "CVE-2026-42151",
"id": "msrc_CVE-2026-42151",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "2",
"product_status:under_investigation": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Prometheus Azure AD remote write OAuth client secret exposed via config API",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-42151.json",
"version": "3"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-42151\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-05-04T19:16:04.220\",\"lastModified\":\"2026-07-20T12:19:16.110\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"prometheus\",\"product\":\"prometheus\",\"versions\":[{\"version\":\"\u003c 3.5.3\",\"status\":\"affected\"},{\"version\":\"\u003e= 3.6.0, \u003c 3.11.3\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1:el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502465\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502025\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502401\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502023\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502029\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502445\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194638\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784196588\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784195620\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194309\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194188\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194653\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194980\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194971\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128388\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128860\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126780\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127787\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126832\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126733\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127775\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jaeger-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"2.19.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"0.153.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector-contrib-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"0.153.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784060681\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968468\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783960127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783326748\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-openscap-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-file-integrity-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-file-integrity-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/loki-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/opa-openshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-ebpf-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-flowlogs-pipeline-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/openshift-mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-multicluster-observability-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-prometheus-config-reloader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/endpoint-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/grafana-dashboard-loader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/metrics-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/obo-prometheus-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/observatorium-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/rbac-query-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-receive-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-5-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-6-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-router-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-metrics-server-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-metrics-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/microshift-bootc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cluster-monitoring-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cluster-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-config-reloader\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-config-reloader-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator-admission-webhook-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator-admission-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prom-label-proxy\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prom-label-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-telemeter\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-thanos-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ztp-site-generate-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-target-allocator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-gateway-opa-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-04T19:54:39.314002Z\",\"id\":\"CVE-2026-42151\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"},{\"lang\":\"en\",\"value\":\"CWE-312\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-256\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.48.0\",\"versionEndExcluding\":\"3.5.3\",\"matchCriteriaId\":\"59F27955-13C7-4DD7-85E8-3D1C62BFF82E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.6.0\",\"versionEndExcluding\":\"3.11.3\",\"matchCriteriaId\":\"26BB9EEC-D049-4268-953C-E90B253745CE\"}]}]}],\"references\":[{\"url\":\"https://github.com/prometheus/prometheus/pull/18587\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/prometheus/prometheus/pull/18590\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25039\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25245\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37267\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37271\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40970\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40972\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40974\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2466507\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-20T07:25:51+00:00",
"cve": "CVE-2026-42151",
"id": "CVE-2026-42151",
"initial_release_date": "2026-05-04T18:12:16.917000+00:00",
"product_status:fixed": "154",
"product_status:known_affected": "85",
"product_status:known_not_affected": "230",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-07T02:23:35Z",
"cve": "CVE-2026-42151",
"id": "CVE-2026-42151",
"initial_release_date": "2026-05-06T01:41:39Z",
"product_status:known_affected": "3",
"product_status:recommended": "110",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-42151",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42151.json",
"version": "6"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1:el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502465\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502025\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502401\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502403\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502023\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502029\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502445\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194638\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784196588\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784195620\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194309\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194188\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194653\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194980\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194971\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128388\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128860\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126780\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127787\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126832\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126733\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127775\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2.19.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"jaeger-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0.153.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0.153.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector-contrib-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784060681\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968468\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783960127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783326748\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-openscap-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-file-integrity-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-file-integrity-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/loki-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/opa-openshift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-ebpf-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-flowlogs-pipeline-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/openshift-mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-multicluster-observability-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-prometheus-config-reloader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/endpoint-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/grafana-dashboard-loader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/metrics-collector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/obo-prometheus-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/observatorium-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/rbac-query-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-receive-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/rhceph-5-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-6-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/grafana-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-router-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-metrics-server-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-metrics-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/microshift-bootc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cluster-monitoring-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cluster-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-config-reloader\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-config-reloader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator-admission-webhook-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator-admission-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prom-label-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prom-label-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-telemeter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-thanos-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ztp-site-generate-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-target-allocator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-gateway-opa-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-query-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-04T19:02:26.983Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-04T18:12:16.917Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25039: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25504: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25245: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-04T18:12:16.917Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-42151\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2466507\", \"name\": \"RHBZ#2466507\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25039\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25245\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40974\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40970\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40972\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-256\", \"description\": \"Plaintext Storage of a Password\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-20T12:05:01.294Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-42151\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-04T19:54:39.314002Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-04T19:54:59.725Z\"}}], \"cna\": {\"title\": \"Prometheus Azure AD remote write OAuth client secret exposed via config API\", \"source\": {\"advisory\": \"GHSA-wg65-39gg-5wfj\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"prometheus\", \"product\": \"prometheus\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 3.5.3\"}, {\"status\": \"affected\", \"version\": \"\u003e= 3.6.0, \u003c 3.11.3\"}]}], \"references\": [{\"url\": \"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\", \"name\": \"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/prometheus/prometheus/pull/18587\", \"name\": \"https://github.com/prometheus/prometheus/pull/18587\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/pull/18590\", \"name\": \"https://github.com/prometheus/prometheus/pull/18590\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\", \"name\": \"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\", \"name\": \"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-312\", \"description\": \"CWE-312: Cleartext Storage of Sensitive Information\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-05-04T18:12:16.917Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-42151\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-20T12:05:01.294Z\", \"dateReserved\": \"2026-04-24T17:15:21.835Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-05-04T18:12:16.917Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:36797
Vulnerability from csaf_redhat - Published: 2026-07-08 15:46 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.2 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36797",
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36797.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-07-20T15:42:19+00:00",
"generator": {
"date": "2026-07-20T15:42:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36797",
"initial_release_date": "2026-07-08T15:46:32+00:00",
"revision_history": [
{
"date": "2026-07-08T15:46:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256:0344b4e6a24947a5d5bb150114c457c99c7c1f4b987b7325c599103b2620f0b1\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256:8eea0dd7273667cb6a00783550f90598569988533d1df3e9ead97062f52c3ad0\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256:cc3daa1b5f8a0154f2ede5fec3c9d9755f6f8bafd44aac6801f61d3788b0a852\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256:40a44daf09563a272b303a57306fce013945da9e9267da5c0095ba30fe1ac954\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256:9d8083d8956c3a5b6af761879ae66699f09be16b5a2d46d0829f0369e722bbc3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256:d026b169014317d85fc71bef3ca52fdf421b57248479413097853e47118de188\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_darwin_amd64.tar.gz\u0026checksum=sha256:d11811c053131069d6a7937f2ee81aacf29aa5e0dc0e4fc2c21fcf219b4c1384\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256:f15eb4c22d7a540a06aa2042fe689924606fa28c9c20a8d645619f4e3de5a449\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256:32a80cab00f2e3b94dd7614e19ba09d5a94f22c10939ca4ca06fc461e6c4b4ec\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256:1e3c1789230f060f1225182f7f6caec445f7c04f6d9d29078151338654352f5b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256:024e50fa4e9349e0468680ac94e281daefbcda7acc4a14db61052a242ace37a7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256:7b86c47c8564a533fb2a5194306857aa9c2b8fca16f8de9a8e242fa58ce3b700\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256:7fd467b7fe65bb4294db426efc9bf264bee8e7773341abac7a8503905464e029\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_darwin_arm64.tar.gz\u0026checksum=sha256:9a6e31af8de1aecbc209eb371c70cb8a40fa13ac076200c717ef32c52fdf1c32\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256:1ff31ed89331b18828e430c5b8ab74f6af01ce6767796d630b5f3a9b17b28dc6\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256:6b31c7f26dc20a7903ee0ff5fddf9b28f445d25caa4d6cf789ceaa5ca70ce112\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256:93720b9c3c48d7f94e885f9250bde724b9ea9f99e9b5c6263746c9d5b94be04e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256:e51c54d5cf34895b8f7c3b391ba7070aac61a557f84f50fb223597412da03414\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_amd64.tar.gz\u0026checksum=sha256:cd613b774b604748640e3b70519fbef26f47740e9e615f1806ff168c6be5d423\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256:2b1bebaca059a78c9c6c15941f1a03960cd515bf76fe61dc325b5487c0bf5839\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_amd64.tar.gz\u0026checksum=sha256:a9e25e8e3287e4c49d2d5c8d594fd8997c14e9d5f12c19ebe7d2a4be3a367186\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.2?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256:3a83ac0e1ba4cf6827ff5b38f5f44c94427ef85beb860325e6ccd116a0b60dce\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256:e37f9344035bed820ae772b9f94c1bbc9e3ae8c394f29ceea57e390fd286031d\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256:5038ef7ea154bd08e7625ec77014acbd7cdd1139bcd174242d39064a8b97320c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256:88f469ea1387b26654726e60b9a34cd078cabbc50b45fdbdc3197b83faec324e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256:5bfe15a942a73fec6864df3a2acf02b34947b25aeb022094f9dbc6f32a173af2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_arm64.tar.gz\u0026checksum=sha256:4067226e5e8708b1304349d996d5d004d9f827f8baa64e32759bbb25e5d9e883\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256:5129a9e3adeecb6e1d1ec0346e8bf38f5b19281009b92b45a157b211bc39b809\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_arm64.tar.gz\u0026checksum=sha256:2b094f8dbb25de8d4484065c9f3ee819a97fb67fd4d72088256ca0478f8821a7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256:2f5cbaabac374a8b61295858bfe984191a881970ebe17be83c3ba35c329fe13a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256:f3a5b8bd3928810ff4cd3469bd1b2c02c5310c0e9407477ac6ba38ce3b09fbb4\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256:25f972648cb2323dba8f825580d6b2de1e88db333c6ed78ad9832a094ea5dcad\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:99ed9ec270447d3b009e0ecf57e71620f39868e8b56d9c9be0bf239e5f07bf39\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_ppc64le.tar.gz\u0026checksum=sha256:9157f1e0a3f483f544c5a8b5d72886f422d1e8111ec75131adf6ee5f6146f1f7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:75d28c4e81f7496b0a927a44e0fce9a766e95a8e383126ac5feb432ec501cc54\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_ppc64le.tar.gz\u0026checksum=sha256:d90e1c644c394300a3e8234a945ee1d70e09ae8c37eb7aee5a3683017c864cbc\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256:ae497f4c2974c0022303a3e1815605ca5e3115d17707b9f75238e3b739fa301a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256:ce8878b50b0c0d3a3828635e4b1045f0bb5f6deeafc1be8fb8ee9cfd2b65fc9d\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256:f73ce30aa019d116998479b58b4cafc03b3fbca16cc47101ea3e78845146f917\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256:bac01104b8e4c112f0dd82af9d8a4f3ca78bbfefb4f88713eac5875bbff1b28a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_s390x.tar.gz\u0026checksum=sha256:1bd24d59d4cebf682f6780da1bbd21e53cebf5f1ac7acfcac360a37a3c06c10c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256:7e8de71d98a483e9fd07e1c79425bd7b3909bf1ebfa2ded9663c835819f280d2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_s390x.tar.gz\u0026checksum=sha256:994a0886ef2ce20919b9422a72a900e85e76817874076fb4981c00dacc73837f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_windows_amd64.zip\u0026checksum=sha256:08c6c5625f35891f5d902aa8e96e8081f7b8f6c331298faf124d657fe389afe1\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_windows_amd64.zip\u0026checksum=sha256:6238651a35a50a6c45014f03d744c593a4d81a7b2bfc124204cd13616ff8388c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256:56491ee25bb1a67b612246bf5d4c57021d8545a3031ca010f9ccc9fc6136d2ed\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256:a5760ac48ebeed01a3d3391eaa6cd91e7e2cb2854f317c07446b4599772997ff\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256:ea9d1ce76fb5c7a8b2d1b6c91157a3b2c9cf021c80bcff773342e7bd7b2bdc90\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256:31f0e4ddf6b49ab3c8c6513a1b947ea850b8250287e0a60ac6f6abbbf0c622d9\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_windows_amd64.zip\u0026checksum=sha256:98bbdfa1f5625480ecd4b2bb2e8d90e1314449b03dfd2f67feaad316cdb7a82e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:46:32+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:37267
Vulnerability from csaf_redhat - Published: 2026-07-09 11:41 - Updated: 2026-07-20 10:28Summary
Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37267",
"url": "https://access.redhat.com/errata/RHSA-2026:37267"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37267.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-20T10:28:52+00:00",
"generator": {
"date": "2026-07-20T10:28:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:37267",
"initial_release_date": "2026-07-09T11:41:05+00:00",
"revision_history": [
{
"date": "2026-07-09T11:41:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T10:28:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"product": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"product_id": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/createtree-rhel9@sha256%3Ab1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/createtree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64",
"product": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64",
"product_id": "registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/createtree-rhel9@sha256%3Abfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/createtree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"product_id": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/createtree-rhel9@sha256%3Ab93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/createtree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"product": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"product_id": "registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"product_identification_helper": {
"purl": "pkg:oci/createtree-rhel9@sha256%3A677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/createtree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x"
},
"product_reference": "registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64"
},
"product_reference": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64"
},
"product_reference": "registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:41:05+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:677a8596784f322ee36ab7b788a65f0f1db163fcd6b7a93f756eb4450324b539_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b1c742d404b5a28dd067f7d77696c2b21d998e257243f054fa167b34e476f72d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:b93cd8eda401b3de28cdcb75b46b61ff485590775b6b1a56479db869fa033b03_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/createtree-rhel9@sha256:bfe49c2bd976ea7182c4e2d9db2c487be221363ac8ebad02fd3b0eb48a7b313c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
}
]
}
RHSA-2026:37271
Vulnerability from csaf_redhat - Published: 2026-07-09 11:43 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 | — |
Vendor Fix
fix
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le | — |
Threats
Impact
Important
References
67 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37271",
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37271.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-20T15:42:25+00:00",
"generator": {
"date": "2026-07-20T15:42:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:37271",
"initial_release_date": "2026-07-09T11:43:07+00:00",
"revision_history": [
{
"date": "2026-07-09T11:43:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3A4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/cosign-rhel9\u0026tag=1783330691"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3Af8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/fetch-tsa-certs-rhel9\u0026tag=1783326690"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3A4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/gitsign-rhel9\u0026tag=1783332061"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3A0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-cli-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3A3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/updatetree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3A15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/cosign-rhel9\u0026tag=1783330691"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3A74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/fetch-tsa-certs-rhel9\u0026tag=1783326690"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3Af9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/gitsign-rhel9\u0026tag=1783332061"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3A4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/rekor-cli-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3Ad034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582?arch=arm64\u0026repository_url=registry.redhat.io/rhtas/updatetree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3Af8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/cosign-rhel9\u0026tag=1783330691"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3A55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/fetch-tsa-certs-rhel9\u0026tag=1783326690"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3A7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/gitsign-rhel9\u0026tag=1783332061"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3Aad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/rekor-cli-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3A01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1?arch=ppc64le\u0026repository_url=registry.redhat.io/rhtas/updatetree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3Ae1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/cosign-rhel9\u0026tag=1783330691"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3Ac9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/fetch-tsa-certs-rhel9\u0026tag=1783326690"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3Ace50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/gitsign-rhel9\u0026tag=1783332061"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3A0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/rekor-cli-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3A205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e?arch=s390x\u0026repository_url=registry.redhat.io/rhtas/updatetree-rhel9\u0026tag=1783329793"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:07+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:15a1e1d82e2ac631cb5bd6aa420fad3f7e52c414d4efba2d642ace24c5b9f3b4_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:4a1174f4cdc367db08f99ccb9586bf0ff8faa47c3360482b4fb33e75588b53eb_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:e1b929b778eb5dc42b81c18cf1cab4a989ec9124de99dbabdaaec8f0531b41ae_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/cosign-rhel9@sha256:f8a19541958467e3f1aa9ddd2868f20ce7cb760581c3c965941bedade78058ef_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:55bf157183d6a9df8032ca0ab62c418a3cc8b591b1a26a193c5eed36bebd01ac_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:74f364bbf2fe939ce8a02f19afd8f43aa2478090c99067add41b6aff004fda4c_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:c9094568f2e694d6a3c7b0162f3b68a2ef9d2f299efce735afc582f66a27130b_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:f8b01d3f2d6400b4208d80d8b66eab7b1f4ec2cd4dcdef06552c3d05db0e896e_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:4f95c088ef66165779e4b2d5ba89cf2594dd0d837bb707350712dc13b8a27c90_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:7c443c3f2c72d1c3cd6ce6cde49a3b781a1b6336bd9b2d974cd69cdfa4c94098_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:ce50f18c962fc813d635461aa9e9bc4fdbf7e8236731caa49b05c1770465cac2_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/gitsign-rhel9@sha256:f9877376bb17567472e84a42ce27273ec3c537103a58d3ff5b616da1b9c18b75_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0187f0248ce7d219797450636bedd086e14ee6932e676bb51d35592306965583_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:0ef106aebc41f050e4833a546a4259c877f3852b94ee914c16a6d646c82d6ec2_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:4565fb543e312c3d113f415fe7d59267086c16a98d8567d2094aed58ff63586e_arm64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:ad6c77b11bdde5dcd5bdddcedfea9f0422e3b685fbf224165a20605b1882d8fc_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:01024a46eac2bb846cee776132a6ce78a69fdc9dfe75df7a0fb379bed6444db1_ppc64le",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:205ef0889fb950e337a07d793cec8cbdfd713c4190ddb374f8c2a6206506a66e_s390x",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:3a7241f722dbbc7f3bc86cfb15cf2b0d96738ad60ad49dbb0b413c524d50013f_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/updatetree-rhel9@sha256:d034bb82bde1eafe676ce11295bcac3a1e653cab1aa0eb1c61e494b8069f1582_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
}
]
}
RHSA-2026:37272
Vulnerability from csaf_redhat - Published: 2026-07-09 11:43 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in image-size. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted JXL, HEIF, or JP2 image files that contain zero-sized boxes. The `findBox` function, responsible for image validation, enters an infinite loop when processing these malicious files, leading to an application hang. This can disrupt the availability of services relying on the image-size component.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the `devalue.parse` function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/<buildId>/<page>.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 | — |
Workaround
|
Threats
Impact
Important
References
124 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20, 4.21, 4.22",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37272",
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-71319",
"url": "https://access.redhat.com/security/cve/CVE-2025-71319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42570",
"url": "https://access.redhat.com/security/cve/CVE-2026-42570"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44573",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44574",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44575",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44577",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44578",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44579",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45109",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37272.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-20T15:42:21+00:00",
"generator": {
"date": "2026-07-20T15:42:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:37272",
"initial_release_date": "2026-07-09T11:43:10+00:00",
"revision_history": [
{
"date": "2026-07-09T11:43:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3Ac34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/certificate-transparency-rhel9@sha256%3A428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9\u0026tag=1783326748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-database-rhel9@sha256%3Ab5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-database-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fulcio-rhel9@sha256%3A9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/fulcio-rhel9\u0026tag=1783326847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3A613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/trillian-redis-rhel9@sha256%3Afd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9\u0026tag=1783329793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3Ac0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9\u0026tag=1783327185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-server-rhel9@sha256%3A938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-server-rhel9\u0026tag=1783332625"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/timestamp-authority-rhel9@sha256%3A5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9\u0026tag=1783326690"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64"
},
"product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
},
"product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
},
"product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-71319",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-09T21:01:11.339286+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487296"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in image-size. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by supplying specially crafted JXL, HEIF, or JP2 image files that contain zero-sized boxes. The `findBox` function, responsible for image validation, enters an infinite loop when processing these malicious files, leading to an application hang. This can disrupt the availability of services relying on the image-size component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `image-size` component, which can be triggered remotely by processing specially crafted JXL, HEIF, or JP2 image files containing zero-sized boxes. This flaw can lead to an application hang due to an infinite loop in the `findBox` function, impacting the availability of services that rely on this image processing library within Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-71319"
},
{
"category": "external",
"summary": "RHBZ#2487296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487296"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-71319",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71319"
},
{
"category": "external",
"summary": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7",
"url": "https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function",
"url": "https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-findbox-function"
}
],
"release_date": "2026-06-09T19:57:16.125000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images."
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42570",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T17:01:16.012124+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487050"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in devalue, a JavaScript library used for serializing values. Due to quirks in some JavaScript engines, the `devalue.parse` function could be exploited by a remote attacker when deserializing specially crafted sparse arrays. This could lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "devalue: devalue: Excessive memory consumption via deserialization of sparse arrays",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42570"
},
{
"category": "external",
"summary": "RHBZ#2487050",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487050"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42570",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42570"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42570",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42570"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d",
"url": "https://github.com/sveltejs/devalue/commit/206ca6712fbc380a4571c59de9ab04b91110792d"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/releases/tag/v5.8.1",
"url": "https://github.com/sveltejs/devalue/releases/tag/v5.8.1"
},
{
"category": "external",
"summary": "https://github.com/sveltejs/devalue/security/advisories/GHSA-77vg-94rm-hx3p",
"url": "https://github.com/sveltejs/devalue/security/advisories/GHSA-77vg-94rm-hx3p"
}
],
"release_date": "2026-06-09T16:12:26.377000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "devalue: devalue: Excessive memory consumption via deserialization of sparse arrays"
},
{
"cve": "CVE-2026-44573",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:50.343509+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477199"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Next.js applications allows unauthorized access to sensitive server-side rendered (SSR) JSON data by bypassing middleware authorization checks. This occurs when applications use the Pages Router with internationalization (i18n) and middleware or proxy-based authorization, enabling remote attackers to retrieve protected page data through locale-less requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "RHBZ#2477199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5"
}
],
"release_date": "2026-05-13T16:48:16.218000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n"
},
{
"cve": "CVE-2026-44574",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:02:21.088167+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Authorization bypass via crafted query parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important authorization bypass flaw in Next.js applications, which are utilized in Red Hat AMQ, Red Hat Trusted Artifact Signer, and Red Hat Enterprise Linux AI. The vulnerability arises when applications use Next.js middleware to protect dynamic routes, allowing attackers to access restricted content by manipulating query parameters. This bypass occurs because specially crafted parameters can alter the route value seen by the page while the visible path remains unchanged, circumventing intended security controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "RHBZ#2477207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv"
}
],
"release_date": "2026-05-13T16:56:06.008000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Authorization bypass via crafted query parameters"
},
{
"cve": "CVE-2026-44575",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:17.168356+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477188"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Unauthorized access to protected content via middleware bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Next.js App Router applications that utilize middleware or proxy-based authorization. A remote attacker can bypass these security checks by crafting specific URLs, leading to unauthorized access to protected content. This is due to transport-specific route variants used for segment prefetching not being consistently matched by middleware rules.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "RHBZ#2477188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477188"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f"
}
],
"release_date": "2026-05-13T16:54:39.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Unauthorized access to protected content via middleware bypass"
},
{
"cve": "CVE-2026-44577",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T18:01:35.713847+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477194"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Denial of Service via Image Optimization API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Next.js affects self-hosted applications utilizing the default image loader. A remote attacker can trigger a denial of service by requesting large local image assets, leading to out-of-memory conditions. This vulnerability is present when `images.localPatterns` is configured to allow all patterns by default, and is not applicable when using Vercel, a custom image loader, or `images.unoptimized: true`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "RHBZ#2477194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh"
}
],
"release_date": "2026-05-13T17:00:02.786000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Denial of Service via Image Optimization API"
},
{
"cve": "CVE-2026-44578",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-05-13T18:01:13.729805+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Next.js affects self-hosted applications, including Red Hat AMQ, when using the built-in Node.js server. A remote attacker can exploit specially crafted WebSocket upgrade requests to perform Server-Side Request Forgery, potentially exposing internal network services or sensitive cloud metadata endpoints. This risk is specific to deployments where the origin server is directly exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "RHBZ#2477187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r"
}
],
"release_date": "2026-05-13T17:01:38.942000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests"
},
{
"cve": "CVE-2026-44579",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-05-13T18:01:32.406247+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477193"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Denial of Service via crafted POST requests to server actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important as Next.js applications configured with Partial Prerendering and Cache Components are susceptible to a remote denial of service. An unauthenticated attacker can exhaust server connections by sending specially crafted POST requests, leading to a complete disruption of service for legitimate users. This impact is significant due to the potential for widespread unavailability of affected web applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "RHBZ#2477193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx"
}
],
"release_date": "2026-05-13T17:04:28.388000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Denial of Service via crafted POST requests to server actions"
},
{
"cve": "CVE-2026-45109",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-13T18:01:23.402405+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Next.js allows a remote unauthenticated attacker to bypass a prior security fix when applications utilize `middleware.ts` with Turbopack. This bypass undermines intended access controls, potentially leading to the exposure of sensitive information in affected Red Hat AMQ and Red Hat Trusted Artifact Signer deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "RHBZ#2477190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6"
}
],
"release_date": "2026-05-13T17:11:07.275000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T11:43:10+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
"Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:37276
Vulnerability from csaf_redhat - Published: 2026-07-09 12:02 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.2 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.2 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37276",
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37276.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-07-20T15:42:23+00:00",
"generator": {
"date": "2026-07-20T15:42:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:37276",
"initial_release_date": "2026-07-09T12:02:04+00:00",
"revision_history": [
{
"date": "2026-07-09T12:02:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256:fcef5c159fbbe52f10daf236ef28e4efff1d10e0a88fac90fd058198c1aee378\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256:7685dd8fc7bf3045457338e6ad609ac8908ab8be2307e9499dcbfab1d87bb82a\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256:88caa3329af46dc1cff2c5d8b09a3d6c76522d9c3c0b8dc2fd383cf5dffa068d\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256:4bacfbbd848fa49497ad338a06c3e882a268b2dbc9484ba5ec623d6386e7a5e1\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256:c2797779b06e8cdda3c353ee36710e2ac27c5fceb9d085eb6bf39d3840eec5ce\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256:26ddfb13eda8d37115ca5b0175a24434596b99d5d9f166046d00323863b3306b\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_darwin_amd64.tar.gz\u0026checksum=sha256:c887977ba3ccb420de86dd487c473e1c5be9d255d05d5279c2c9a298cd12378e\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256:026257fae5f612e658974f3fedbec8803dc8924966332bb03981eb1ff70546b2\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256:b1554bd7ddb35a19a0b721ad5eabb9c0d422505d817d4bd9d6f279bae7859452\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256:fe37cb537d3cbbf34e3804632eb21b8dfccc8a3b1cd5b13ff9f798b1b8842acf\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256:053f539b47232842d4c808588c5e8e5a28d2dd32a831985dfe53fe2cd97218fc\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256:921a524347dc770d4fdcc78dde6617787ecc8c89e06a6b884637e5b626c024d0\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256:8b5ec569fd842b35cd83246ca52a892c84cd947fdebdf94c6b6b90c8987bcf87\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_darwin_arm64.tar.gz\u0026checksum=sha256:1b48c9b409961d2969c17abd1c5d34b9ea3b4da8b166bc20859971de0168222f\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256:8d94dddf37a075012570bc25943af0bab4c18cf0a2f2e7df12420cb65426098f\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256:14ef4fba87de2550849c725f51dd9840d253d5dd5714497a2e163d0469ba56cf\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256:1745ce976b3b40459e45315045844eec6da05257cbfaa9d7d691326253e570b7\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256:0c9b642430f1b93be2fe54c2b187e01d3b8f2fa6a3bd397b3f99bb4f503c98e9\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_amd64.tar.gz\u0026checksum=sha256:a3fbc311728367f1b3944cdbad95e71daaad26fc2600fae568fc547e3bfe0ec0\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256:55b3c98d8b67a98d271e7d2da6d2bf105187bbc0bc47024b846a7da8c134e011\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_amd64.tar.gz\u0026checksum=sha256:0524e93581dbac55bd4c61b5963889becfd8236b48ead5f7e5bb9e75f764315e\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.2?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256:44585c9dc569d2a9f546354a691f52603a7be1a9910f38a1e8633ac978434043\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256:a2486dd0b191dc3a062a578b80432deae52da4cf6a88db7422ccd9a1b31997c7\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256:95a6a8b00deaef251041aeea5d83be5076ed7a4fa2e85e00a5fb8ad855100db9\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256:56df74bca855aaec3eb3fefd5d820701f8d49e9525a30594dc0bf5be29220a1a\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256:ee557a2039789e5a22c5da6cf87daff9609c364db58f40b860095aaf397f25b5\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_arm64.tar.gz\u0026checksum=sha256:8d68d756af91231329428d1b9404c10769ffeb3cb5977bae4a2b36477da4296f\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256:b7f0c43de7bb2bee8c312c3ba5962f9908dcff316465bf294e2f45608973704b\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_arm64.tar.gz\u0026checksum=sha256:4a7b9e72cd5e0b2ce0394d3eb0b15037d788d491b16bcc38ec17e303426470ea\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256:fc4734836efdf37e357a6d1737e188ec4e7cb0d246550e4aa0fc234e7cc2787c\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256:b77c879a8afff89dc52c735cf6f672455897ab9b1addce614a117ca22c6117de\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256:d69ce340e87731eb088f7904c85be98096a869763aa24bbf90497a129f6ff729\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:2a9ee7a47149e483c8f52906013e3e1c61aa9c6726799ed3f286653d245b86fe\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_ppc64le.tar.gz\u0026checksum=sha256:9d02da54aba46f245fa241b9febf9fe8e33051c9115fa4df761d28db9057977e\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:4322571c2f1f07c3edb6ae7223198c063086bb5b56c7e0b031a4600ff9860596\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_ppc64le.tar.gz\u0026checksum=sha256:4d1a82a524a64df409c97f9e0da8c21c7c47cd746d26ab88af501b3eea247ece\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256:f55518c891b6fc44983ba9522bde74c28801832cffda173ff7059b54e9473463\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256:bb8f9e81435db0c22c125f797bf13d0e1e450d1526fc0f7d9c57bf20103217d1\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256:91a86ecf400ef33d01460729bab35a6c2c75974afe172eb60be65777a20d84a9\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256:18777b954900232487d4ec5d38ee06e4f2cf7910f0890f9939eccb3145a71609\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_pkcs11_linux_s390x.tar.gz\u0026checksum=sha256:09d94092e31c6b75eeb8a401636086e5bbc9b20015f585a98e47cf1901be5b9d\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256:296e28921ab43bd8c009e932966536c5c362cd098adf6197cbad3c10cc168be5\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_linux_s390x.tar.gz\u0026checksum=sha256:e06b62cebffe30897d7aa142328166448dbe3627f9409620d94ee51e91ef0725\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.2?filename=ec_windows_amd64.zip\u0026checksum=sha256:b4c75113b0da7a331b0f4c03c111be37881eb1282676f09036c058ee08823520\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.2?filename=cosign_windows_amd64.zip\u0026checksum=sha256:7a1543f6dd3281539fedcffdb2704db58c127069ded5834b1729cd6252f64abd\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.2?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256:1927926c9f363291c96188ee998abd4465e7aee8c9db25289c811c3c78ec79d0\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.2?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256:70be8fc23bd3d39842bf52826f44039b4f6600bed064350b1866e539b37a9125\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.2?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256:ad459c17f2e6d3d96f83e5e04f78c20560ff12080fc225c4ce420ac24fb92256\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.2?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256:48e3616b12225f829b08bf2aec5fb9ea75ea2a4fe0d18bf1769920d6053224d4\u0026download_url=https://developers.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.2?filename=updatetree_windows_amd64.zip\u0026checksum=sha256:ebc7bc6970b4e18469f6aa959fef6d8ec6b391f85a003b936010effe81295738\u0026download_url=https://developers.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T12:02:04+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:40118
Vulnerability from csaf_redhat - Published: 2026-07-15 16:22 - Updated: 2026-07-20 15:43Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
References
232 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40118",
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40118.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-07-20T15:43:33+00:00",
"generator": {
"date": "2026-07-20T15:43:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40118",
"initial_release_date": "2026-07-15T16:22:53+00:00",
"revision_history": [
{
"date": "2026-07-15T16:22:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:43:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.1",
"product": {
"name": "Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Abeaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1784128388"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1784128860"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1784126780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ab1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1784127787"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3Ab98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1784126762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1784127762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3Aafba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1784126832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1784126774"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3A918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1784127791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3Afcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1784127135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Af40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1784127736"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1784126822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1784126733"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1784127775"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Ae05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1784128388"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3Ae5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1784128860"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1784126780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ad8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1784127787"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1784126762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1784127762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3A39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1784126832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3Abaefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1784126774"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Adc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1784127791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1784127135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3A7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1784127736"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Abd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1784126822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1784126733"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1784127775"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:40262
Vulnerability from csaf_redhat - Published: 2026-07-15 19:14 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: Red Hat Quay 3.9.24
Severity
Important
Notes
Topic: Red Hat Quay 3.9.24 is now available with bug fixes.
Details: Quay 3.9.24
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
References
188 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.9.24 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.9.24",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40262",
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40262.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.9.24",
"tracking": {
"current_release_date": "2026-07-20T15:42:29+00:00",
"generator": {
"date": "2026-07-20T15:42:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40262",
"initial_release_date": "2026-07-15T19:14:30+00:00",
"revision_history": [
{
"date": "2026-07-15T19:14:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.9",
"product": {
"name": "Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783750582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Ae7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784129592"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Ab6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Afdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Af8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:40945
Vulnerability from csaf_redhat - Published: 2026-07-16 10:53 - Updated: 2026-07-20 15:43Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
References
232 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40945",
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40945.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-07-20T15:43:34+00:00",
"generator": {
"date": "2026-07-20T15:43:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40945",
"initial_release_date": "2026-07-16T10:53:15+00:00",
"revision_history": [
{
"date": "2026-07-16T10:53:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:43:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.1",
"product": {
"name": "Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3Afe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3A53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Aff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3Ad788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Af7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3A54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Afdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Ac91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Aa2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3Abc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Ac1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3A464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:40970
Vulnerability from csaf_redhat - Published: 2026-07-16 11:17 - Updated: 2026-07-20 10:28Summary
Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40970",
"url": "https://access.redhat.com/errata/RHSA-2026:40970"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40970.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-20T10:28:52+00:00",
"generator": {
"date": "2026-07-20T10:28:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40970",
"initial_release_date": "2026-07-16T11:17:50+00:00",
"revision_history": [
{
"date": "2026-07-16T11:17:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T10:28:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64",
"product": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64",
"product_id": "registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/createtree-rhel9@sha256%3A8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/createtree-rhel9\u0026tag=1783968861"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
},
"product_reference": "registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:17:50+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40970"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:17:50+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40970"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/createtree-rhel9@sha256:8d6b3161f936e040379053b779750239fb7e3df70b4aca8108e47bb93214a5ca_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
}
]
}
RHSA-2026:40972
Vulnerability from csaf_redhat - Published: 2026-07-16 11:18 - Updated: 2026-07-20 15:42Summary
Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 | — |
Workaround
|
Threats
Impact
Important
References
90 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40972",
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40972.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-20T15:42:32+00:00",
"generator": {
"date": "2026-07-20T15:42:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40972",
"initial_release_date": "2026-07-16T11:18:34+00:00",
"revision_history": [
{
"date": "2026-07-16T11:18:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T15:42:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3Aff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/cosign-rhel9\u0026tag=1783961973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3A509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/fetch-tsa-certs-rhel9\u0026tag=1783968644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3A9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/gitsign-rhel9\u0026tag=1783959819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3A2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rekor-cli-rhel9\u0026tag=1783969365"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3Adfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/updatetree-rhel9\u0026tag=1783968861"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:18:34+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:ff6a2a11b8c1dff47cb115cfa3ba5709bff5f1cf485bdaecff47f1a37cad2405_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:509c0e0b9eed611a57d26fc3bc4ca20bd086c887aad681efbc9abd256fe75768_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:9c9fd84299b0743bc9ae38a82263ad9032ec3b8e21fc535adadcf754e08273cf_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:2460173fff610c5def39777d5a32ab1d7d59a9298335c489326abfeb7ca4bc15_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:dfae5377710f369844bc6502a6b107d998b1b55e1ca202810ebaf1903efabe5e_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…