Vulnerability-Lookup

RHSA-2026:22862

Vulnerability from csaf_redhat - Published: 2026-06-03 14:28 - Updated: 2026-06-04 04:45

Summary

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.5

Severity

Important

Notes

Topic: Logging for Red Hat OpenShift - 6.4.5

Details: Red Hat OpenShift Logging 6.4.5 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-25679

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Workaround

Threats

Impact Important

CVE-2026-27137

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Workaround

Threats

Impact Important

CVE-2026-31812

A flaw was found in quinn-proto, a pure-Rust implementation of the IETF QUIC transport protocol. A remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-248 - Uncaught Exception

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x	—	Workaround

Threats

Impact Important

CVE-2026-32280

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Vendor Fix fix

Known not affected 30 products

Product	Identifier	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64		—

Threats

Impact Important

CVE-2026-32281

A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-32282

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-32829

lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly validate offset values during LZ4 "match copy operations," allowing out-of-bounds reads from the output buffer. The block-based API functions (`decompress_into`, `decompress_into_with_dict`, and others when `safe-decode` is disabled) are affected, while all frame APIs are unaffected. The impact is potential exposure of sensitive data and secrets through crafted or malformed LZ4 input. This issue has been fixed in versions 0.11.6 and 0.12.1.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64	—	Vendor Fix fix

Known not affected 30 products

Product	Identifier	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x		—

Threats

Impact Important

CVE-2026-33810

A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le	—	Vendor Fix fix

Known not affected 30 products

Product	Identifier	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64		—

Threats

Impact Important

References

67 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:22862	self
https://access.redhat.com/security/cve/CVE-2026-25679	external
https://access.redhat.com/security/cve/CVE-2026-27137	external
https://access.redhat.com/security/cve/CVE-2026-31812	external
https://access.redhat.com/security/cve/CVE-2026-32280	external
https://access.redhat.com/security/cve/CVE-2026-32281	external
https://access.redhat.com/security/cve/CVE-2026-32282	external
https://access.redhat.com/security/cve/CVE-2026-32829	external
https://access.redhat.com/security/cve/CVE-2026-33810	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-25679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445356	external
https://www.cve.org/CVERecord?id=CVE-2026-25679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25679	external
https://go.dev/cl/752180	external
https://go.dev/issue/77578	external
https://groups.google.com/g/golang-announce/c/Edh…	external
https://pkg.go.dev/vuln/GO-2026-4601	external
https://access.redhat.com/security/cve/CVE-2026-27137	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445345	external
https://www.cve.org/CVERecord?id=CVE-2026-27137	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27137	external
https://go.dev/cl/752182	external
https://go.dev/issue/77952	external
https://pkg.go.dev/vuln/GO-2026-4599	external
https://access.redhat.com/security/cve/CVE-2026-31812	self
https://bugzilla.redhat.com/show_bug.cgi?id=2446330	external
https://www.cve.org/CVERecord?id=CVE-2026-31812	external
https://nvd.nist.gov/vuln/detail/CVE-2026-31812	external
https://github.com/quinn-rs/quinn/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-32280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456339	external
https://www.cve.org/CVERecord?id=CVE-2026-32280	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32280	external
https://go.dev/cl/758320	external
https://go.dev/issue/78282	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4947	external
https://access.redhat.com/security/cve/CVE-2026-32281	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456333	external
https://www.cve.org/CVERecord?id=CVE-2026-32281	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32281	external
https://go.dev/cl/758061	external
https://go.dev/issue/78281	external
https://pkg.go.dev/vuln/GO-2026-4946	external
https://access.redhat.com/security/cve/CVE-2026-32282	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456336	external
https://www.cve.org/CVERecord?id=CVE-2026-32282	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32282	external
https://go.dev/cl/763761	external
https://go.dev/issue/78293	external
https://pkg.go.dev/vuln/GO-2026-4864	external
https://access.redhat.com/security/cve/CVE-2026-32829	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448271	external
https://www.cve.org/CVERecord?id=CVE-2026-32829	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32829	external
https://github.com/PSeitz/lz4_flex	external
https://github.com/PSeitz/lz4_flex/commit/055502e…	external
https://github.com/PSeitz/lz4_flex/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-33810	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456335	external
https://www.cve.org/CVERecord?id=CVE-2026-33810	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33810	external
https://go.dev/cl/763763	external
https://go.dev/issue/78332	external
https://pkg.go.dev/vuln/GO-2026-4866	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Logging for Red Hat OpenShift - 6.4.5",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Logging 6.4.5 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:22862",
        "url": "https://access.redhat.com/errata/RHSA-2026:22862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-31812",
        "url": "https://access.redhat.com/security/cve/CVE-2026-31812"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32829",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22862.json"
      }
    ],
    "title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.5",
    "tracking": {
      "current_release_date": "2026-06-04T04:45:24+00:00",
      "generator": {
        "date": "2026-06-04T04:45:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:22862",
      "initial_release_date": "2026-06-03T14:28:38+00:00",
      "revision_history": [
        {
          "date": "2026-06-03T14:28:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-03T14:28:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-04T04:45:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Logging Subsystem for Red Hat OpenShift 6.4",
                "product": {
                  "name": "Logging Subsystem for Red Hat OpenShift 6.4",
                  "product_id": "Logging Subsystem for Red Hat OpenShift 6.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:6.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Logging Subsystem for Red Hat OpenShift"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Aed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1780051689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3A2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1780055531"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1780051630"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1780051809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Af88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1780051656"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-operator-bundle@sha256%3A236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1780055542"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1780051644"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ab150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3Afac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1780052069"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1780051689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1780051630"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1780051809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1780051656"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ae4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1780051644"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ab1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1780052069"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1780051689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ad840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1780051630"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Aec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1780051809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Ab3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1780051656"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1780051644"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3Af2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1780052069"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1780051689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Acbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1780051630"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1780051809"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1780051656"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1780051644"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1780051640"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3Aba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1780052069"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-27137",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-03-06T22:01:38.859733+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752182",
          "url": "https://go.dev/cl/752182"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77952",
          "url": "https://go.dev/issue/77952"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4599",
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "release_date": "2026-03-06T21:28:13.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
    },
    {
      "cve": "CVE-2026-31812",
      "cwe": {
        "id": "CWE-248",
        "name": "Uncaught Exception"
      },
      "discovery_date": "2026-03-10T23:02:15.752133+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in quinn-proto, a pure-Rust implementation of the IETF QUIC transport protocol. A remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The availability impact of this flaw is limited to specific services on Red Hat systems. Host system availability is not at risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-31812"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-31812",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-31812"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31812",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31812"
        },
        {
          "category": "external",
          "summary": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98",
          "url": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98"
        }
      ],
      "release_date": "2026-03-10T21:04:36.812000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet"
    },
    {
      "cve": "CVE-2026-32280",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-08T02:01:19.572351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758320",
          "url": "https://go.dev/cl/758320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78282",
          "url": "https://go.dev/issue/78282"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4947",
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "release_date": "2026-04-08T01:06:58.595000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-32829",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "discovery_date": "2026-03-16T22:05:38.553414+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448271"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0,  decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly validate offset values during LZ4 \"match copy operations,\" allowing out-of-bounds reads from the output buffer. The block-based API functions (`decompress_into`, `decompress_into_with_dict`, and others when `safe-decode` is disabled) are affected, while all frame APIs are unaffected. The impact is potential exposure of sensitive data and secrets through crafted or malformed LZ4 input. This issue has been fixed in versions 0.11.6 and 0.12.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lz4_flex: lz4_flex\u0027s decompression can leak information from uninitialized memory or reused output buffer",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In RHEL 9 and RHEL 10, this vulnerability presents minimal risk as the rust-analyzer component operates in a \"closed loop,\" strictly decompressing its own internal database. Because it does not process external or untrusted data, exploitation requires an attacker to already possess local access and sufficient privileges to tamper with the internal cache files on disk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32829"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448271",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448271"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32829",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32829"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32829",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32829"
        },
        {
          "category": "external",
          "summary": "https://github.com/PSeitz/lz4_flex",
          "url": "https://github.com/PSeitz/lz4_flex"
        },
        {
          "category": "external",
          "summary": "https://github.com/PSeitz/lz4_flex/commit/055502ee5d297ecd6bf448ac91c055c7f6df9b6d",
          "url": "https://github.com/PSeitz/lz4_flex/commit/055502ee5d297ecd6bf448ac91c055c7f6df9b6d"
        },
        {
          "category": "external",
          "summary": "https://github.com/PSeitz/lz4_flex/security/advisories/GHSA-vvp9-7p8x-rfvv",
          "url": "https://github.com/PSeitz/lz4_flex/security/advisories/GHSA-vvp9-7p8x-rfvv"
        }
      ],
      "release_date": "2026-03-16T20:48:08+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lz4_flex: lz4_flex\u0027s decompression can leak information from uninitialized memory or reused output buffer"
    },
    {
      "cve": "CVE-2026-33810",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-04-08T02:01:09.100830+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456335"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456335",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763763",
          "url": "https://go.dev/cl/763763"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78332",
          "url": "https://go.dev/issue/78332"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4866",
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "release_date": "2026-04-08T01:06:56.546000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T14:28:38+00:00",
          "details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22862"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:2bce5cfd48129d7b7754573fb47cb9270f25b39d12d2219734c77e999ddf3d29_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0d3749fd70dc3cddf9fd2d778c2e665c4b67ce31c45b714d38e32af0b31e580d_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:15de420e2672e785da00ab02631f7114ea139c3938acf7f710b753c4047e4dc9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:67e812457329a99f8c269cfeb815df6d904b65a29e3bcd0e0edd538cbb53bcf4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ed33a9c93ef3846acd2f5db2531275566272c9d289d3155d3c9350c392f05356_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:098c88aa165426fc42a8ed1c2730eaeeea973acf1dc4448d72d4fa8cff1c433b_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:0a6bb7af1977294b71519115ccc42e59653ec12479ebf0b3af81f7d24bf46da1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:61b62441c88e85f877e876a5ecc95c32d0faba813b708f9d1db759dce5385798_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9f345c47dd532864c1413308dbae6dd5de08137f87fced025d2047ae8939a492_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0137e7a64ee09dcfd28f3f14202242b31d102c125a141a36df93784e4094aacf_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:2ff96f6e5c4e642f639df37cedfdd8ffd34e203e8cd06921af0c02f647496212_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cbdfe1e832575a8fffd5a9759078725c00161a098c693b43ff42bcfce8afbd05_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d840cf730b13b0a36340b180863a2fbcf0d7b6f1e953481a24fadbc9b3fd07c9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:587c7963571af01291ea01563c426a93d77a77ef22b79641fddbc9833791bff7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:681a30a4d5f06811095d4d2d60c26be71be64d0fdf1f73de4ef03d11df125291_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:89af60956e8a9edffd4da720bb312780cc8df816dcdb3c42f9692a6a18b2f009_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec5351b18b95ae528f39f28e0ee4469f5e5b57544499c596ca07236084b2dcf4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:236c1feeeaec558b78611f2b599c8554639e7d6667bdd664bef2fc9ff1b86093_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:465e6c0a23afe7551b3a0522a8e7ed7519b93a94ef11ccdb41d034adbbc8f7f9_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4b98fca26d5a72afbae2a15869fe0c0320d7ff5bbb9934e641be6536ed8387af_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b3f5cfe39e28e525f1329d5a49307f8b0c48da0c29cb52be7fe98199c62d40ec_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f88441adcde4ec537cf76021824a8007c42c4ecefffff310e5c5f2117824bb79_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2bcb9fd79a9591c1e00c40d5e123ca027391072f91c3dc598acad5b169528797_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:84a61cc3d10c90399780ba85d120f4a49f8393500a12eb2fd7a8943b4cbdb352_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:95a10b681f0e2e0c8a889836ca7be8e8a621713e271fbfdcd3b4227d8d49d07a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e4f738a3fafa98b23ce46210c11a7d79d6a95244b9ec635bb4bd88623f193954_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:287d83e470aa60a068613952a14bcc2718038ca1ee52798185e55ee365a129c8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b150b15286bda982d5dce2e68dd4bfae007eb10d51c785ff214ca9c3f6db64ea_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b1b2e6eb05040c21c81a83912b8658e57c03a7e455384ed14f86819bb978a5b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ee25673121b321d6f79982333dea1b656a315b5a825d5019fa093a36cdd81dd0_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3176f479ec53def3156169e601b336dc27e1e9684969f793a5b672d8954db9a7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ba3685a116c66d18d1cdd49bbbf18386365b543775b711d29d8ccd4937884f04_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:f2d2027264fab22aae64f9e9db1a8faaaca948fd65215c3c4dbcbb8bfc362558_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:fac56a57019df1c8e23c930f456ae1f6e2166139da5ee54be53cb0530931a816_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
    }
  ]
}

CVE-2026-25679 (GCVE-0-2026-25679)

Vulnerability from cvelistv5 – Published: 2026-03-06 21:28 – Updated: 2026-03-10 13:37

Title

Incorrect parsing of IPv6 host literals in net/url

Summary

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Assigner

References

4 references

URL	Tags
https://go.dev/cl/752180
https://go.dev/issue/77578
https://groups.google.com/g/golang-announce/c/Edh…
https://pkg.go.dev/vuln/GO-2026-4601

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/url	Affected: 0 , < 1.25.8 (semver) Affected: 1.26.0-0 , < 1.26.1 (semver)

Credits

Masaki Hara (https://github.com/qnighy) of Wantedly

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-25679",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-10T13:36:26.554241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-10T13:37:02.459Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/url",
          "product": "net/url",
          "programRoutines": [
            {
              "name": "parseHost"
            },
            {
              "name": "JoinPath"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseRequestURI"
            },
            {
              "name": "URL.Parse"
            },
            {
              "name": "URL.UnmarshalBinary"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.8",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.1",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Masaki Hara (https://github.com/qnighy) of Wantedly"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1286: Improper Validation of Syntactic Correctness of Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-06T21:28:14.211Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/752180"
        },
        {
          "url": "https://go.dev/issue/77578"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "title": "Incorrect parsing of IPv6 host literals in net/url"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-25679",
    "datePublished": "2026-03-06T21:28:14.211Z",
    "dateReserved": "2026-02-05T01:33:41.943Z",
    "dateUpdated": "2026-03-10T13:37:02.459Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27137 (GCVE-0-2026-27137)

Vulnerability from cvelistv5 – Published: 2026-03-06 21:28 – Updated: 2026-03-10 13:32

Title

Incorrect enforcement of email constraints in crypto/x509

Summary

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-295 - Improper Certificate Validation

Assigner

References

4 references

URL	Tags
https://go.dev/cl/752182
https://go.dev/issue/77952
https://groups.google.com/g/golang-announce/c/Edh…
https://pkg.go.dev/vuln/GO-2026-4599

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 1.26.0-0 , < 1.26.1 (semver)

Credits

Jakub Ciolek

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27137",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-10T13:32:09.097820Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-10T13:32:53.202Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "newEmailConstraints"
            },
            {
              "name": "emailConstraints.query"
            },
            {
              "name": "checkConstraints"
            },
            {
              "name": "checkChainConstraints"
            },
            {
              "name": "parseMailboxes"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.1",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-08T05:56:20.771Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/752182"
        },
        {
          "url": "https://go.dev/issue/77952"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "title": "Incorrect enforcement of email constraints in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27137",
    "datePublished": "2026-03-06T21:28:13.748Z",
    "dateReserved": "2026-02-17T19:57:28.434Z",
    "dateUpdated": "2026-03-10T13:32:53.202Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31812 (GCVE-0-2026-31812)

Vulnerability from cvelistv5 – Published: 2026-03-10 21:04 – Updated: 2026-03-11 15:19

Title

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Summary

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-248 - Uncaught Exception

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/quinn-rs/quinn/security/adviso…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
quinn-rs	quinn	Affected: < 0.11.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-31812",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-11T15:11:56.226827Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-11T15:19:29.150Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "quinn",
          "vendor": "quinn-rs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.11.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-10T21:04:36.812Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98"
        }
      ],
      "source": {
        "advisory": "GHSA-6xvm-j4wr-6v98",
        "discovery": "UNKNOWN"
      },
      "title": "Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-31812",
    "datePublished": "2026-03-10T21:04:36.812Z",
    "dateReserved": "2026-03-09T16:33:42.914Z",
    "dateUpdated": "2026-03-11T15:19:29.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32280 (GCVE-0-2026-32280)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-08 17:46

Title

Unexpected work during chain building in crypto/x509

Summary

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

References

4 references

URL	Tags
https://go.dev/cl/758320
https://go.dev/issue/78282
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4947

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Jakub Ciolek - https://ciolek.dev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32280",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T17:46:14.569488Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T17:46:47.347Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "Certificate.buildChains"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:58.595Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/758320"
        },
        {
          "url": "https://go.dev/issue/78282"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "title": "Unexpected work during chain building in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32280",
    "datePublished": "2026-04-08T01:06:58.595Z",
    "dateReserved": "2026-03-11T16:38:46.555Z",
    "dateUpdated": "2026-04-08T17:46:47.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32281 (GCVE-0-2026-32281)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-13 18:19

Title

Inefficient policy validation in crypto/x509

Summary

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

References

4 references

URL	Tags
https://go.dev/cl/758061
https://go.dev/issue/78281
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4946

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Jakub Ciolek - https://ciolek.dev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32281",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:52:37.734298Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:19:44.779Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "policiesValid"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:58.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/758061"
        },
        {
          "url": "https://go.dev/issue/78281"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "title": "Inefficient policy validation in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32281",
    "datePublished": "2026-04-08T01:06:58.354Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-04-13T18:19:44.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32282 (GCVE-0-2026-32282)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-13 18:20

Title

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

Summary

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

Severity

6.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-61 - UNIX Symbolic Link (Symlink) Following

Assigner

References

4 references

URL	Tags
https://go.dev/cl/763761
https://go.dev/issue/78293
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4864

Impacted products

1 product

Vendor	Product	Version
Go standard library	internal/syscall/unix	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Uuganbayar Lkhamsuren (https://github.com/uug4na)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32282",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:47:42.666766Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:20:56.456Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "internal/syscall/unix",
          "platforms": [
            "linux"
          ],
          "product": "internal/syscall/unix",
          "programRoutines": [
            {
              "name": "Fchmodat"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Uuganbayar Lkhamsuren (https://github.com/uug4na)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-61: UNIX Symbolic Link (Symlink) Following",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:55.953Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/763761"
        },
        {
          "url": "https://go.dev/issue/78293"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "title": "TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32282",
    "datePublished": "2026-04-08T01:06:55.953Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-04-13T18:20:56.456Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32829 (GCVE-0-2026-32829)

Vulnerability from cvelistv5 – Published: 2026-03-20 00:49 – Updated: 2026-03-21 03:03

Title

lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer

Summary

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data
CWE-823 - Use of Out-of-range Pointer Offset

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/PSeitz/lz4_flex/security/advis…	x_refsource_CONFIRM
https://github.com/PSeitz/lz4_flex/commit/055502e…	x_refsource_MISC
https://rustsec.org/advisories/RUSTSEC-2026-0041.html	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
PSeitz	lz4_flex	Affected: < 0.11.6 Affected: >= 0.12.0, < 0.12.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32829",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-21T03:02:22.812939Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-21T03:03:09.928Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "lz4_flex",
          "vendor": "PSeitz",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.11.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 0.12.0, \u003c 0.12.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0,  decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly validate offset values during LZ4 \"match copy operations,\" allowing out-of-bounds reads from the output buffer. The block-based API functions (`decompress_into`, `decompress_into_with_dict`, and others when `safe-decode` is disabled) are affected, while all frame APIs are unaffected. The impact is potential exposure of sensitive data and secrets through crafted or malformed LZ4 input. This issue has been fixed in versions 0.11.6 and 0.12.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201: Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-823",
              "description": "CWE-823: Use of Out-of-range Pointer Offset",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-20T00:49:12.893Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/PSeitz/lz4_flex/security/advisories/GHSA-vvp9-7p8x-rfvv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/PSeitz/lz4_flex/security/advisories/GHSA-vvp9-7p8x-rfvv"
        },
        {
          "name": "https://github.com/PSeitz/lz4_flex/commit/055502ee5d297ecd6bf448ac91c055c7f6df9b6d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/PSeitz/lz4_flex/commit/055502ee5d297ecd6bf448ac91c055c7f6df9b6d"
        },
        {
          "name": "https://rustsec.org/advisories/RUSTSEC-2026-0041.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://rustsec.org/advisories/RUSTSEC-2026-0041.html"
        }
      ],
      "source": {
        "advisory": "GHSA-vvp9-7p8x-rfvv",
        "discovery": "UNKNOWN"
      },
      "title": "lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-32829",
    "datePublished": "2026-03-20T00:49:12.893Z",
    "dateReserved": "2026-03-16T17:35:36.698Z",
    "dateUpdated": "2026-03-21T03:03:09.928Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33810 (GCVE-0-2026-33810)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-20 17:23

Title

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Summary

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-295 - Improper Certificate Validation

Assigner

References

6 references

URL	Tags
https://go.dev/cl/763763
https://go.dev/issue/78332
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4866
http://www.openwall.com/lists/oss-security/2026/04/19/4
http://www.openwall.com/lists/oss-security/2026/04/20/1

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Riyas from Saintgits College of Engineering k1rnt @1seal

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33810",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:48:57.879958Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:20:37.411Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-20T17:23:21.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "newDNSConstraints"
            },
            {
              "name": "dnsConstraints.query"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Riyas from Saintgits College of Engineering"
        },
        {
          "lang": "en",
          "value": "k1rnt"
        },
        {
          "lang": "en",
          "value": "@1seal"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:56.546Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/763763"
        },
        {
          "url": "https://go.dev/issue/78332"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33810",
    "datePublished": "2026-04-08T01:06:56.546Z",
    "dateReserved": "2026-03-23T20:35:32.814Z",
    "dateUpdated": "2026-04-20T17:23:21.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:22862

CVE-2026-25679 (GCVE-0-2026-25679)

CVE-2026-27137 (GCVE-0-2026-27137)

CVE-2026-31812 (GCVE-0-2026-31812)

CVE-2026-32280 (GCVE-0-2026-32280)

CVE-2026-32281 (GCVE-0-2026-32281)

CVE-2026-32282 (GCVE-0-2026-32282)

CVE-2026-32829 (GCVE-0-2026-32829)

CVE-2026-33810 (GCVE-0-2026-33810)

Tags

Sightings

Nomenclature