{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title" : "Topic" }, { "category" : "general", "text" : "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:14391", "url" : "https://access.redhat.com/errata/RHSA-2026:14391" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/#important", "url" : "https://access.redhat.com/security/updates/classification/#important" }, { "category" : "external", "summary" : "2456335", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456335" }, { "category" : "external", "summary" : "2456336", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456336" }, { "category" : "external", "summary" : "2456338", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456338" }, { "category" : "external", "summary" : "2456339", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456339" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14391.json" } ], "title" : "Red Hat Security Advisory: Red Hat build of Cryostat security update", "tracking" : { "current_release_date" : "2026-05-26T14:59:12+00:00", "generator" : { "date" : "2026-05-26T14:59:12+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "4.8.1" } }, "id" : "RHSA-2026:14391", "initial_release_date" : "2026-05-06T21:10:06+00:00", "revision_history" : [ { "date" : "2026-05-06T21:10:06+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-05-06T21:10:06+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-05-26T14:59:12+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Cryostat 4 on RHEL 9", "product" : { "name" : "Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:cryostat:4::el9" } } } ], "category" : "product_family", "name" : "Cryostat" }, { "branches" : [ { "category" : "product_version", "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "product" : { "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "product_id" : "cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9&tag=0.6.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "product" : { "name" : "cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "product_id" : "cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "product" : { "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "product_id" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9&tag=4.1.1-5" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "product" : { "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "product_id" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "product" : { "name" : "cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "product_id" : "cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "product" : { "name" : "cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "product_id" : "cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "product" : { "name" : "cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "product_id" : "cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "product" : { "name" : "cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "product_id" : "cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "product" : { "name" : "cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "product_id" : "cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c?arch=arm64&repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "product" : { "name" : "cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "product_id" : "cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "product_identification_helper" : { "purl" : "pkg:oci/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a?arch=arm64&repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9&tag=4.1.1-4" } } } ], "category" : "architecture", "name" : "arm64" }, { "branches" : [ { "category" : "product_version", "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "product" : { "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "product_id" : "cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9&tag=0.6.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "product" : { "name" : "cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "product_id" : "cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "product" : { "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "product_id" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9&tag=4.1.1-5" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "product" : { "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "product_id" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "product" : { "name" : "cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "product_id" : "cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "product" : { "name" : "cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "product_id" : "cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-rhel9&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "product" : { "name" : "cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "product_id" : "cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle&tag=4.1.1-4" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "product" : { "name" : "cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "product_id" : "cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "product" : { "name" : "cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "product_id" : "cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "product_identification_helper" : { "purl" : "pkg:oci/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9?arch=amd64&repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9&tag=4.1.1-7" } } }, { "category" : "product_version", "name" : "cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64", "product" : { "name" : "cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64", "product_id" : "cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64", "product_identification_helper" : { "purl" : "pkg:oci/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71?arch=amd64&repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9&tag=4.1.1-4" } } } ], "category" : "architecture", "name" : "amd64" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64" }, "product_reference" : "cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64" }, "product_reference" : "cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64" }, "product_reference" : "cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64" }, "product_reference" : "cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64" }, "product_reference" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64" }, "product_reference" : "cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64" }, "product_reference" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64" }, "product_reference" : "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64" }, "product_reference" : "cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64" }, "product_reference" : "cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64" }, "product_reference" : "cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64" }, "product_reference" : "cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64" }, "product_reference" : "cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64" }, "product_reference" : "cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64" }, "product_reference" : "cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64" }, "product_reference" : "cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64" }, "product_reference" : "cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" }, "product_reference" : "cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64" }, "product_reference" : "cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "relates_to_product_reference" : "9Base-Cryostat-4" }, { "category" : "default_component_of", "full_product_name" : { "name" : "cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64 as a component of Cryostat 4 on RHEL 9", "product_id" : "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" }, "product_reference" : "cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64", "relates_to_product_reference" : "9Base-Cryostat-4" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2026-32280", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-04-08T02:01:19.572351+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456339" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "known_not_affected" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32280" }, { "category" : "external", "summary" : "RHBZ#2456339", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456339" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32280", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32280" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32280" }, { "category" : "external", "summary" : "https://go.dev/cl/758320", "url" : "https://go.dev/cl/758320" }, { "category" : "external", "summary" : "https://go.dev/issue/78282", "url" : "https://go.dev/issue/78282" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4947", "url" : "https://pkg.go.dev/vuln/GO-2026-4947" } ], "release_date" : "2026-04-08T01:06:58.595000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-05-06T21:10:06+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:14391" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building" }, { "cve" : "CVE-2026-32282", "cwe" : { "id" : "CWE-367", "name" : "Time-of-check Time-of-use (TOCTOU) Race Condition" }, "discovery_date" : "2026-04-08T02:01:12.683211+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456336" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "known_not_affected" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32282" }, { "category" : "external", "summary" : "RHBZ#2456336", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456336" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32282", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32282" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32282", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32282" }, { "category" : "external", "summary" : "https://go.dev/cl/763761", "url" : "https://go.dev/cl/763761" }, { "category" : "external", "summary" : "https://go.dev/issue/78293", "url" : "https://go.dev/issue/78293" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4864", "url" : "https://pkg.go.dev/vuln/GO-2026-4864" } ], "release_date" : "2026-04-08T01:06:55.953000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-05-06T21:10:06+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:14391" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root" }, { "cve" : "CVE-2026-32283", "cwe" : { "id" : "CWE-764", "name" : "Multiple Locks of a Critical Resource" }, "discovery_date" : "2026-04-08T02:01:16.213799+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456338" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "known_not_affected" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32283" }, { "category" : "external", "summary" : "RHBZ#2456338", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456338" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32283", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32283" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32283" }, { "category" : "external", "summary" : "https://go.dev/cl/763767", "url" : "https://go.dev/cl/763767" }, { "category" : "external", "summary" : "https://go.dev/issue/78334", "url" : "https://go.dev/issue/78334" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4870", "url" : "https://pkg.go.dev/vuln/GO-2026-4870" } ], "release_date" : "2026-04-08T01:06:57.670000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-05-06T21:10:06+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:14391" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages" }, { "cve" : "CVE-2026-33810", "cwe" : { "id" : "CWE-1289", "name" : "Improper Validation of Unsafe Equivalence in Input" }, "discovery_date" : "2026-04-08T02:01:09.100830+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456335" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "known_not_affected" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-33810" }, { "category" : "external", "summary" : "RHBZ#2456335", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456335" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-33810", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-33810" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33810", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33810" }, { "category" : "external", "summary" : "https://go.dev/cl/763763", "url" : "https://go.dev/cl/763763" }, { "category" : "external", "summary" : "https://go.dev/issue/78332", "url" : "https://go.dev/issue/78332" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4866", "url" : "https://pkg.go.dev/vuln/GO-2026-4866" } ], "release_date" : "2026-04-08T01:06:56.546000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-05-06T21:10:06+00:00", "details" : "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:14391" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 8.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "CHANGED", "userInteraction" : "REQUIRED", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L", "version" : "3.1" }, "products" : [ "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f0b40e2312ae2659f9d0092a98488d7c5965ab33efe759ce78778b1b8173c5d6_arm64", "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:f2aeac65f02f6d21b497972087a808104100b547d92ab1a5656d91b48262c97d_amd64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:231d5f0956e242c675b2f33df01d7a1fd9f44c9ee80f2b05731a60e0022e1483_arm64", "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:8c6ca482631927526d6e8d1ca455cffc379d798c7d8d323c699e7ffc5ff44c88_amd64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:2e68b360df2e9532458e97127a16e10765c3e7bbe4842d6ad48febca834af1f2_arm64", "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:e0092c9adc9bf671729ec2a4682f3c53f1f12a9fdf09edf5f5c4b65172e04742_amd64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:03b2d5ec8747fa2984b4659b0d61c5dd67dd729c6957918752b8033a3e6f40ec_arm64", "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:5d356babef136df86f11f77ec595d9e9cc9a7f246eeb458e062757e273a9e803_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5479230ed1ace22b8f00141796326cae84a772b1b6f14f52a58366a9695266da_amd64", "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:b2a02cd673f7dd96218aa92a11bb924eb4538060f77fb8e773d0f13f5bdec55f_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:71ff61b5a765e62ef16bd633580dc9d49e8fcb46a68c3ee0e831d161b598956a_arm64", "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:fb4b8f8338d6f3b7458ec9643d49175333a69d15650f026a1038836668f0c076_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:b3c9c59b462a94d181b51ee7419c5e89618da06bb70d7905f7efeeca12e57c6b_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:c4a8388737cd5330176421462353b4253dcbf4c7dc963b644b5d122cda3022d1_arm64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:548ef61d03e7b861bed4b2f86cb826add8fcf13251d34562a4ac78302eae9d88_amd64", "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:6daca9dff828394e3181355526276fdc6448eace218fc3c30b63b992bee5424d_arm64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95938fed3fcf7e786bcc418e5cc05999519336dd9b1ae26ac09b87d122244ce9_amd64", "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:95c41160b310ef0c54ddab4fd77dfaf02faf62de58d15b3a90b375c76226181c_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:914d1985a1944cf4c25530b67aad321e7a8d6f28cfb7793b703b69456deecf8a_arm64", "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:965a1522fc45c8aeff07508ba9291919bd007318da0511ee2ed4e4c18190ec71_amd64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application" } ] }