{ "threat_severity" : "Important", "public_date" : "2026-05-22T15:01:21Z", "bugzilla" : { "description" : "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "id" : "2480756", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480756" }, "cvss3" : { "cvss3_base_score" : "8.2", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "status" : "verified" }, "cwe" : "CWE-1289", "details" : [ "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected." ], "statement" : "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.", "affected_release" : [ { "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42078", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8", "package" : "receptor-0:1.6.6-1.el8ap" }, { "product_name" : "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42078", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el9", "package" : "receptor-0:1.6.6-1.el9ap" }, { "product_name" : "Red Hat Ansible Automation Platform 2.6 for RHEL 10", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42079", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el10", "package" : "receptor-0:1.6.6-1.el10ap" }, { "product_name" : "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42079", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9", "package" : "receptor-0:1.6.6-1.el9ap" }, { "product_name" : "Red Hat Ansible Automation Platform 2.7 for RHEL 10", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42080", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.7::el10", "package" : "receptor-0:1.6.6-1.el10ap" }, { "product_name" : "Red Hat Ansible Automation Platform 2.7 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42080", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.7::el9", "package" : "receptor-0:1.6.6-1.el9ap" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:30855", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "git-lfs-0:3.7.1-5.el10_2.5" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34357", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "opentelemetry-collector-0:0.152.1-1.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35826", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "grafana-pcp-0:5.3.0-7.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35827", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "grafana-0:10.2.6-27.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37436", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "golang-0:1.26.5-1.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-13T00:00:00Z", "advisory" : "RHSA-2026:39005", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "rhc-1:0.3.8-6.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-07-15T00:00:00Z", "advisory" : "RHSA-2026:39573", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "yggdrasil-0:0.4.9.2-1.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:30853", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "git-lfs-0:3.4.1-11.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35830", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "grafana-0:9.2.10-31.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35831", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "grafana-pcp-0:5.1.1-16.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-07-13T00:00:00Z", "advisory" : "RHSA-2026:38995", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "go-toolset:rhel8-8100020260710105056.a3795dee" }, { "product_name" : "Red Hat Enterprise Linux 8", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:41930", "cpe" : "cpe:/a:redhat:enterprise_linux:8", "package" : "rhc-1:0.2.5-9.el8_10" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:30854", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "git-lfs-0:3.7.1-4.el9_8.1" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34359", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "opentelemetry-collector-0:0.152.1-1.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35828", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "grafana-0:10.2.6-23.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35829", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "grafana-pcp-0:5.1.1-17.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37435", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "golang-0:1.26.5-1.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-07-15T00:00:00Z", "advisory" : "RHSA-2026:39879", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "rhc-1:0.2.7-8.el9_8" }, { "product_name" : "Red Hat OpenShift Container Platform 4.22", "release_date" : "2026-07-07T00:00:00Z", "advisory" : "RHSA-2026:34789", "cpe" : "cpe:/a:redhat:openshift:4.22::el8", "package" : "ose-azure-acr-image-credential-provider-0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8" }, { "product_name" : "Red Hat Satellite 6.16 for RHEL 8", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42082", "cpe" : "cpe:/a:redhat:satellite:6.16::el8", "package" : "yggdrasil-worker-forwarder-0:0.0.4-1.el8sat" }, { "product_name" : "Red Hat Satellite 6.16 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42082", "cpe" : "cpe:/a:redhat:satellite:6.16::el9", "package" : "yggdrasil-worker-forwarder-0:0.0.4-1.el9sat" }, { "product_name" : "Red Hat Satellite 6.17 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42150", "cpe" : "cpe:/a:redhat:satellite:6.17::el9", "package" : "yggdrasil-worker-forwarder-0:0.0.4-1.el9sat" }, { "product_name" : "Red Hat Satellite 6.18 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42151", "cpe" : "cpe:/a:redhat:satellite:6.18::el9", "package" : "yggdrasil-worker-forwarder-0:0.0.4-1.el9sat" }, { "product_name" : "Red Hat Satellite 6.19 for RHEL 9", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42240", "cpe" : "cpe:/a:redhat:satellite:6.19::el9", "package" : "yggdrasil-worker-forwarder-0:0.0.4-1.el9sat" }, { "product_name" : "RHEM 1.0 for RHEL 9", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36796", "cpe" : "cpe:/a:redhat:edge_manager:1.0::el9", "package" : "flightctl-0:1.0.3-1.el9em" }, { "product_name" : "RHEM 1.1 for RHEL 10", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41019", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el10", "package" : "flightctl-0:1.1.3-1.el10em" }, { "product_name" : "RHEM 1.1 for RHEL 9", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41019", "cpe" : "cpe:/a:redhat:edge_manager:1.1:el9", "package" : "flightctl-0:1.1.3-1.el9em" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9:1782839981" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9:1782839193" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/distributed-tracing-console-plugin-rhel9:1782838753" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1782844225" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1782839658" }, { "product_name" : "Cluster Observability Operator 1.5.0", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34342", "cpe" : "cpe:/a:redhat:cluster_observability_operator:1.5::el9", "package" : "cluster-observability-operator/monitoring-console-plugin-rhel9:1782838476" }, { "product_name" : "DevWorkspace Operator 0.42", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36808", "cpe" : "cpe:/a:redhat:devworkspace:0.42::el9", "package" : "devworkspace/devworkspace-rhel9-operator:1782401674" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift 6.4", "release_date" : "2026-07-01T00:00:00Z", "advisory" : "RHSA-2026:34364", "cpe" : "cpe:/a:redhat:logging:6.4::el9", "package" : "openshift-logging/eventrouter-rhel9:1782408807" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-07-07T00:00:00Z", "advisory" : "RHSA-2026:36105", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el8", "package" : "multicluster-engine/assisted-service-8-rhel8:1783332008" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-07-07T00:00:00Z", "advisory" : "RHSA-2026:36167", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1783333268" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41055", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el9", "package" : "multicluster-engine/discovery-rhel9:1783985999" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30650", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/kube-rbac-proxy-mce-rhel9:1782477094" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30650", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/multicloud-manager-rhel9:1782308518" }, { "product_name" : "multicluster engine for Kubernetes 2.9", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36883", "cpe" : "cpe:/a:redhat:multicluster_engine:2.9::el9", "package" : "multicluster-engine/discovery-rhel9:1783260894" }, { "product_name" : "Multicluster Global Hub 1.4.5", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41030", "cpe" : "cpe:/a:redhat:multicluster_globalhub:1.4::el9", "package" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784061472" }, { "product_name" : "Multicluster Global Hub 1.5.6", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:42852", "cpe" : "cpe:/a:redhat:multicluster_globalhub:1.5::el9", "package" : "multicluster-globalhub/multicluster-globalhub-agent-rhel9:1784127491" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/acm-grafana-rhel9:1782383730" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/acm-multicluster-observability-addon-rhel9:1782156698" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/acm-prometheus-config-reloader-rhel9:1782157632" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/acm-prometheus-rhel9:1782157829" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/cluster-backup-rhel9-operator:1782157630" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/endpoint-monitoring-rhel9-operator:1782382580" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/grafana-dashboard-loader-rhel9:1782383255" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/kube-rbac-proxy-rhel9:1782488873" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/kube-state-metrics-rhel9:1782157507" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/metrics-collector-rhel9:1782396604" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/multicluster-observability-rhel9-operator:1782382711" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/node-exporter-rhel9:1782157546" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/observatorium-rhel9:1782157471" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/observatorium-rhel9-operator:1782157018" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/prometheus-alertmanager-rhel9:1782156920" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/prometheus-rhel9:1782374537" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/rbac-query-proxy-rhel9:1782383676" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/thanos-receive-controller-rhel9:1782156860" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.13", "release_date" : "2026-06-28T00:00:00Z", "advisory" : "RHSA-2026:30651", "cpe" : "cpe:/a:redhat:acm:2.13::el9", "package" : "rhacm2/thanos-rhel9:1782465412" }, { "product_name" : "Red Hat Advanced Cluster Security 4.9", "release_date" : "2026-06-17T00:00:00Z", "advisory" : "RHSA-2026:26546", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.9::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1781686446" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.10", "release_date" : "2026-06-17T00:00:00Z", "advisory" : "RHSA-2026:26547", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.10::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1781686458" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.11", "release_date" : "2026-07-07T00:00:00Z", "advisory" : "RHSA-2026:36207", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.11::el9", "package" : "advanced-cluster-security/rhacs-main-rhel9:1783352589" }, { "product_name" : "Red Hat Ansible Automation Platform 2.6", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42132", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9", "package" : "ansible-automation-platform-26/receptor-rhel9:1783962464" }, { "product_name" : "Red Hat Ansible Automation Platform 2.7", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42142", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.7::el9", "package" : "ansible-automation-platform-27/receptor-rhel9:1783917963" }, { "product_name" : "Red Hat Edge Manager 1.0", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36651", "cpe" : "cpe:/a:redhat:edge_manager:1.0::el9", "package" : "rhem/flightctl-ui-rhel9:1783502438" }, { "product_name" : "Red Hat Edge Manager 1.1", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:40945", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el10", "package" : "rhem/flightctl-ui-rhel10:1784194574" }, { "product_name" : "Red Hat Edge Manager 1.1", "release_date" : "2026-07-15T00:00:00Z", "advisory" : "RHSA-2026:40118", "cpe" : "cpe:/a:redhat:edge_manager:1.1::el9", "package" : "rhem/flightctl-ui-rhel9:1784127736" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33524", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/disk-image-cuda-rhel9:1782804957" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-aws-cuda-rhel9:1782758407" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-azure-cuda-rhel9:1782758410" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-azure-rocm-rhel9:1782754093" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-cuda-rhel9:1782744816" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-gcp-cuda-rhel9:1782758409" }, { "product_name" : "Red Hat Enterprise Linux AI 3.4", "release_date" : "2026-06-30T00:00:00Z", "advisory" : "RHSA-2026:33531", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.4::el9", "package" : "rhelai3/bootc-rocm-rhel9:1782744830" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-06-04T00:00:00Z", "advisory" : "RHSA-2026:23262", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-25-main-1.25.11-2.hum1" }, { "product_name" : "Red Hat Hardened Images", "release_date" : "2026-06-04T00:00:00Z", "advisory" : "RHSA-2026:23264", "cpe" : "cpe:/a:redhat:hummingbird:1", "package" : "golang1-26-main-1.26.4-2.hum1" }, { "product_name" : "Red Hat Migration Toolkit 1.8", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:41928", "cpe" : "cpe:/a:redhat:rhmt:1.8::el8", "package" : "rhmtc/openshift-migration-controller-rhel8:1783953372" }, { "product_name" : "Red Hat Migration Toolkit for Applications 8.2", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:43038", "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8.2::el9", "package" : "mta/mta-cli-rhel9:1784211378" }, { "product_name" : "Red Hat OpenShift AI 2.25", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:42644", "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9", "package" : "rhoai/odh-kueue-controller-rhel9:1783544461" }, { "product_name" : "Red Hat OpenShift AI 2.25", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:42644", "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9", "package" : "rhoai/odh-rhel9-operator:1784004914" }, { "product_name" : "Red Hat OpenShift AI 2.25", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:42644", "cpe" : "cpe:/a:redhat:openshift_ai:2.25::el9", "package" : "rhoai/odh-training-operator-rhel9:1783946386" }, { "product_name" : "Red Hat OpenShift Builds 1.7.4", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36648", "cpe" : "cpe:/a:redhat:openshift_builds:1.7::el9", "package" : "openshift-builds/openshift-builds-controller-rhel9:1783057515" }, { "product_name" : "Red Hat OpenShift Builds 1.7.4", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36648", "cpe" : "cpe:/a:redhat:openshift_builds:1.7::el9", "package" : "openshift-builds/openshift-builds-waiters-rhel9:1783057868" }, { "product_name" : "Red Hat OpenShift Builds 1.8.1", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41036", "cpe" : "cpe:/a:redhat:openshift_builds:1.8::el9", "package" : "openshift-builds/openshift-builds-rhel9-operator:1784121108" }, { "product_name" : "Red Hat OpenShift Builds 1.8.1", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41036", "cpe" : "cpe:/a:redhat:openshift_builds:1.8::el9", "package" : "openshift-builds/openshift-builds-waiters-rhel9:1783612119" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/cephcsi-rhel9:1782932114" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/cephcsi-rhel9-operator:1782931768" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/devicefinder-rhel9:1782932104" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/mcg-core-rhel9:1783536000" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/mcg-rhel9-operator:1783535989" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-client-console-rhel9:1783536515" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-client-rhel9-operator:1782932521" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1783018461" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/ocs-rhel9-operator:1783018421" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-blackbox-exporter-rhel9:1782932812" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cli-rhel9:1783537001" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1782932919" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-console-rhel9:1783537586" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1782932969" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1782933015" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1782933042" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-drbd-rhel9:1783537392" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-external-snapshotter-rhel9-operator:1782933235" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-external-snapshotter-sidecar-rhel9:1782933251" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-multicluster-console-rhel9:1783537955" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1782933417" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-must-gather-rhel9:1783537742" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odf-rhel9-operator:1782933602" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-rhel9-operator:1783019377" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-volsync-plugin-mover-rhel9:1782934054" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/odr-volsync-plugin-rhel9-operator:1782934036" }, { "product_name" : "Red Hat Openshift Data Foundation 4.22", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37387", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.22::el9", "package" : "odf4/rook-ceph-rhel9-operator:1782934284" }, { "product_name" : "Red Hat OpenShift Dev Spaces 3.29", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36820", "cpe" : "cpe:/a:redhat:openshift_devspaces:3.29::el9", "package" : "devspaces/udi-rhel9:1782991491" }, { "product_name" : "Red Hat OpenShift GitOps 1.19", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35994", "cpe" : "cpe:/a:redhat:openshift_gitops:1.19::el8", "package" : "openshift-gitops-1/dex-rhel8:1782292352" }, { "product_name" : "Red Hat OpenShift GitOps 1.2", "release_date" : "2026-07-06T00:00:00Z", "advisory" : "RHSA-2026:35993", "cpe" : "cpe:/a:redhat:openshift_gitops:1.20::el9", "package" : "openshift-gitops-1/dex-rhel9:1782383826" }, { "product_name" : "Red Hat OpenShift Service Mesh 2.6", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:33155", "cpe" : "cpe:/a:redhat:service_mesh:2.6::el8", "package" : "openshift-service-mesh/kiali-rhel8:1782287580" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.0", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:33160", "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9", "package" : "openshift-service-mesh/kiali-rhel9:1782201833" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:33163", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-rhel9:1782201537" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:33173", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-rhel9:1782201812" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-06-29T00:00:00Z", "advisory" : "RHSA-2026:33183", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-rhel9:1782201466" }, { "product_name" : "Red Hat Quay 3.1", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41031", "cpe" : "cpe:/a:redhat:quay:3.10::el8", "package" : "quay/quay-rhel8:1783750447" }, { "product_name" : "Red Hat Quay 3.12", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42146", "cpe" : "cpe:/a:redhat:quay:3.12::el8", "package" : "quay/quay-rhel8:1783751865" }, { "product_name" : "Red Hat Quay 3.15", "release_date" : "2026-07-21T00:00:00Z", "advisory" : "RHSA-2026:42796", "cpe" : "cpe:/a:redhat:quay:3.15::el8", "package" : "quay/quay-rhel8:1784351966" }, { "product_name" : "Red Hat Quay 3.16", "release_date" : "2026-07-16T00:00:00Z", "advisory" : "RHSA-2026:41066", "cpe" : "cpe:/a:redhat:quay:3.16::el9", "package" : "quay/quay-rhel9:1783955846" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-07-15T00:00:00Z", "advisory" : "RHSA-2026:40262", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1784125838" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.4", "release_date" : "2026-07-08T00:00:00Z", "advisory" : "RHSA-2026:36797", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.4::el9", "package" : "conforma-cli-stack-v1-4-1.4.2" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.4", "release_date" : "2026-07-09T00:00:00Z", "advisory" : "RHSA-2026:37276", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.4::el9", "package" : "conforma-cli-stack-v1-4-1.4.2" }, { "product_name" : "Red Hat Web Terminal 1.11", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42043", "cpe" : "cpe:/a:redhat:webterminal:1.11::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784296203" }, { "product_name" : "Red Hat Web Terminal 1.12", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42047", "cpe" : "cpe:/a:redhat:webterminal:1.12::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784247610" }, { "product_name" : "Red Hat Web Terminal 1.13", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42050", "cpe" : "cpe:/a:redhat:webterminal:1.13::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784296127" }, { "product_name" : "Red Hat Web Terminal 1.14", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42051", "cpe" : "cpe:/a:redhat:webterminal:1.14::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784296114" }, { "product_name" : "Red Hat Web Terminal 1.15", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42049", "cpe" : "cpe:/a:redhat:webterminal:1.15::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784296033" }, { "product_name" : "Red Hat Web Terminal 1.16", "release_date" : "2026-07-20T00:00:00Z", "advisory" : "RHSA-2026:42048", "cpe" : "cpe:/a:redhat:webterminal:1.16::el9", "package" : "web-terminal/web-terminal-exec-rhel9:1784295767" } ], "package_state" : [ { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/jetstack-cert-manager-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "Compliance Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-operator-bundle", "cpe" : "cpe:/a:redhat:openshift_compliance_operator:1" }, { "product_name" : "Confidential Compute Attestation", "fix_state" : "Affected", "package_name" : "build-of-trustee/trustee-rhel9-operator", "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1" }, { "product_name" : "Confidential Compute Attestation", "fix_state" : "Affected", "package_name" : "openshift-sandboxed-containers/osc-monitor-rhel9", "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1" }, { "product_name" : "Cryostat 4", "fix_state" : "Not affected", "package_name" : "cryostat/cryostat-storage-rhel9", "cpe" : "cpe:/a:redhat:cryostat:4" }, { "product_name" : "Deployment Validation Operator", "fix_state" : "Affected", "package_name" : "dvo/deployment-validation-rhel8-operator", "cpe" : "cpe:/a:redhat:deployment_validator_operator" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Will not fix", "package_name" : "external-secrets-operator/external-secrets-rhel9", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "Fence Agents Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/fence-agents-remediation-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_far:0" }, { "product_name" : "File Integrity Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-compliance-operator-bundle", "cpe" : "cpe:/a:redhat:openshift_file_integrity_operator:1" }, { "product_name" : "Gatekeeper 3", "fix_state" : "Affected", "package_name" : "gatekeeper/gatekeeper-rhel9-operator", "cpe" : "cpe:/a:redhat:gatekeeper:3" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/lvms-rhel9-operator", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/topolvm-rhel8", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Affected", "package_name" : "lvms4/topolvm-rhel9", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Machine Deletion Remediation Operator", "fix_state" : "Affected", "package_name" : "workload-availability/machine-deletion-remediation-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_mdr:0" }, { "product_name" : "Multiarch Tuning Operator", "fix_state" : "Affected", "package_name" : "multiarch-tuning/multiarch-tuning-rhel9-operator", "cpe" : "cpe:/a:redhat:multiarch_tuning_operator" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/addon-manager-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/backplane-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-agent-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-api-provider-kubevirt-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/clusterclaims-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-curator-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/cluster-image-set-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Under investigation", "package_name" : "multicluster-engine/hypershift-addon-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/image-based-install-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/placement-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/provider-credential-controller-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/registration-operator-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/registration-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/work-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Network Observability Operator", "fix_state" : "Affected", "package_name" : "network-observability/network-observability-cli-rhel9", "cpe" : "cpe:/a:redhat:network_observ_optr:1" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-rhel8-operator", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Under investigation", "package_name" : "multicluster-engine/hypershift-addon-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Under investigation", "package_name" : "oadp/oadp-velero-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Under investigation", "package_name" : "openshift4/ose-hypershift-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "helm", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines-client", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-scheduler-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "kn-workflow-plugin", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-plugin-event-sender-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/logic-rhel9-operator", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-clients", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "Power monitoring for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-power-monitoring/kepler-rhel9", "cpe" : "cpe:/a:redhat:openshift_power_monitoring" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Not affected", "package_name" : "3scale-amp2/3scale-rhel7-operator", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat 3scale API Management Platform 2", "fix_state" : "Affected", "package_name" : "3scale-amp2/3scale-rhel9-operator", "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-cli-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-cluster-permission-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-governance-policy-addon-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-governance-policy-framework-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-must-gather-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-search-indexer-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-search-v2-api-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-search-v2-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-volsync-addon-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/cert-policy-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/config-policy-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/governance-policy-propagator-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/insights-client-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/insights-metrics-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/klusterlet-addon-controller-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/memcached-exporter-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicloud-integrations-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multiclusterhub-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-application-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-channel-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/multicluster-operators-subscription-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/search-collector-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/subctl-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/submariner-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform/platform-operator-bundle", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway-proxy", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway-proxy-openssl30", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "automation-gateway-proxy-openssl32", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.11-galaxy-ng", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python3.12-galaxy-ng", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ceph Storage 5", "fix_state" : "Fix deferred", "package_name" : "rhceph/rhceph-5-dashboard-rhel8", "cpe" : "cpe:/a:redhat:ceph_storage:5" }, { "product_name" : "Red Hat Ceph Storage 6", "fix_state" : "Fix deferred", "package_name" : "rhceph/rhceph-6-dashboard-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:6" }, { "product_name" : "Red Hat Ceph Storage 8", "fix_state" : "Fix deferred", "package_name" : "rhceph/grafana-rhel9", "cpe" : "cpe:/a:redhat:ceph_storage:8" }, { "product_name" : "Red Hat Ceph Storage 9", "fix_state" : "Fix deferred", "package_name" : "rhceph/alloy-rhel10", "cpe" : "cpe:/a:redhat:ceph_storage:9" }, { "product_name" : "Red Hat Certification Program for Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "redhat-certification-preflight", "cpe" : "cpe:/a:redhat:certifications:9" }, { "product_name" : "Red Hat Connectivity Link 1", "fix_state" : "Affected", "package_name" : "rhcl-1/authorino-rhel9", "cpe" : "cpe:/a:redhat:connectivity_link:1" }, { "product_name" : "Red Hat Developer Hub", "fix_state" : "Out of support scope", "package_name" : "rhdh/rhdh-rhel9-operator", "cpe" : "cpe:/a:redhat:rhdh:1" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "butane", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "delve", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "go-fdo-client", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "go-fdo-server", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "golang-github-openprinting-ipp-usb", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "gvisor-tap-vsock", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "podman", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "rhc-worker-playbook", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "rhel10/bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Will not fix", "package_name" : "rhel10-eus/rhel-10.0-bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "toolbox", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "trustee", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "trustee-guest-components", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Not affected", "package_name" : "host-metering", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Affected", "package_name" : "rhc", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Affected", "package_name" : "rhc-worker-script", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/conmon", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/containernetworking-plugins", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/podman", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "container-tools:rhel8/toolbox", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "golang", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "weldr-client", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "butane", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "conmon", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "containernetworking-plugins", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "gvisor-tap-vsock", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "podman", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "rhel9/bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Will not fix", "package_name" : "rhel9-eus/rhel-9.6-bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "toolbox", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "trustee-guest-components", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "weldr-client", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Will not fix", "package_name" : "golang", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Hardened Images", "fix_state" : "Not affected", "package_name" : "golang-fips1.25", "cpe" : "cpe:/a:redhat:hummingbird:1", "impact" : "important" }, { "product_name" : "Red Hat Lightspeed for Runtimes Operator", "fix_state" : "Affected", "package_name" : "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator", "cpe" : "cpe:/a:redhat:lightspeed_for_runtimes:1" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ai-gateway-payload-processing-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-codeflare-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-operator-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-eval-hub-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-feast-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kf-notebook-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kserve-llmisvc-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kube-auth-proxy-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-kuberay-operator-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llama-stack-k8s-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-gc-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-batch-gateway-processor-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-inference-scheduler-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-routing-sidecar-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-maas-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-maas-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mlflow-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-driver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-launcher-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mm-rest-proxy-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-automl-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-autorag-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-mod-arch-eval-hub-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-gen-ai-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-maas-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-mlflow-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-modelmesh-runtime-adapter-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-modelmesh-serving-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-model-registry-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-model-serving-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-notebook-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-rhaii-cluster-validator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-rhel8-operator", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-spark-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-trainer-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-trustyai-service-operator-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workload-variant-autoscaler-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/rhai-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Cluster Manager CLI", "fix_state" : "Affected", "package_name" : "ocm-cli-clients/ocm-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "atomic-openshift-service-idler", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "butane", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "conmon", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "conmon-rs", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "containernetworking-plugins", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "cri-o", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "cri-tools", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Will not fix", "package_name" : "golang-github-prometheus-promu", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "kata-containers", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "microshift", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/frr-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-cli", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Under investigation", "package_name" : "openshift4/ose-hypershift-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift-clients", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift-kuryr", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-aws-ecr-image-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-crio-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "ose-gcp-gcr-image-credential-provider", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "podman", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "skopeo", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift for Windows Containers", "fix_state" : "Affected", "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator", "cpe" : "cpe:/a:redhat:windows_machine_config" }, { "product_name" : "Red Hat OpenShift on AWS", "fix_state" : "Affected", "package_name" : "rosa", "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/kubevirt-apiserver-proxy-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Affected", "package_name" : "kubevirt", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Affected", "package_name" : "etcd", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Not affected", "package_name" : "golang-github-infrawatch-apputils", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 16.2", "fix_state" : "Not affected", "package_name" : "rhosp-rhel8/osp-director-agent", "cpe" : "cpe:/a:redhat:openstack:16.2" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Not affected", "package_name" : "collectd-libpod-stats", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Affected", "package_name" : "etcd", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Not affected", "package_name" : "golang-github-infrawatch-apputils", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 17.1", "fix_state" : "Not affected", "package_name" : "rhosp-rhel9/osp-director-agent", "cpe" : "cpe:/a:redhat:openstack:17.1" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Not affected", "package_name" : "golang-github-openstack-k8s-operators-os-diff", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Not affected", "package_name" : "rhoso-operators/ovn-rhel9-operator", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "satellite:el8/yggdrasil-worker-forwarder", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Affected", "package_name" : "satellite/iop-vmaas-rhel9", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Service Interconnect 1", "fix_state" : "Not affected", "package_name" : "skupper-cli", "cpe" : "cpe:/a:redhat:service_interconnect:1" }, { "product_name" : "Red Hat Service Interconnect 2", "fix_state" : "Not affected", "package_name" : "skupper-cli", "cpe" : "cpe:/a:redhat:service_interconnect:2" }, { "product_name" : "Security Profiles Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-security-profiles-rhel8-operator", "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1" }, { "product_name" : "streams for Apache Kafka 3", "fix_state" : "Affected", "package_name" : "golang-github-danielqsj-kafka_exporter", "cpe" : "cpe:/a:redhat:amq_streams:3" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-39821\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-39821\nhttps://go.dev/cl/767220\nhttps://go.dev/issue/78760\nhttps://groups.google.com/g/golang-announce/c/iI-mYSI0lu8\nhttps://pkg.go.dev/vuln/GO-2026-5026" ], "name" : "CVE-2026-39821", "mitigation" : { "value" : "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.", "lang" : "en:us" }, "csaw" : false }