{ "threat_severity" : "Important", "public_date" : "2026-04-06T16:22:45Z", "bugzilla" : { "description" : "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "id" : "2455470", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2455470" }, "cvss3" : { "cvss3_base_score" : "7.5", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status" : "verified" }, "cwe" : "CWE-131", "details" : [ "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.", "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users." ], "affected_release" : [ { "product_name" : "Cryostat 4 on RHEL 9", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:17789", "cpe" : "cpe:/a:redhat:cryostat:4::el9", "package" : "cryostat/cryostat-storage-rhel9:4.2.0-13" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19017", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "podman-7:5.8.2-1.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19135", "cpe" : "cpe:/o:redhat:enterprise_linux:10.2", "package" : "opentelemetry-collector-0:0.144.0-2.el10_2" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:16696", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "skopeo-2:1.18.1-3.el10_0.1" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17040", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "podman-6:5.4.0-15.el10_0.1" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:19719", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "opentelemetry-collector-0:0.144.0-2.el10_0" }, { "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20569", "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0", "package" : "buildah-2:1.39.9-1.el10_0" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-04-24T00:00:00Z", "advisory" : "RHSA-2026:10135", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "buildah-2:1.41.8-3.el9_7" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19173", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "podman-6:5.8.2-1.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19186", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "buildah-2:1.43.1-1.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19353", "cpe" : "cpe:/a:redhat:enterprise_linux:9", "package" : "opentelemetry-collector-0:0.144.0-2.el9_8" }, { "product_name" : "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:19721", "cpe" : "cpe:/a:redhat:rhel_eus:9.4", "package" : "opentelemetry-collector-0:0.144.0-2.el9_4" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17287", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "podman-5:5.4.0-20.el9_6.3" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:19720", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "opentelemetry-collector-0:0.144.0-2.el9_6" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20607", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "buildah-2:1.39.9-1.el9_6" }, { "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20609", "cpe" : "cpe:/a:redhat:rhel_eus:9.6", "package" : "skopeo-2:1.18.1-5.el9_6.1" }, { "product_name" : "multicluster engine for Kubernetes 2.1", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12116", "cpe" : "cpe:/a:redhat:multicluster_engine:2.10::el9", "package" : "multicluster-engine/assisted-installer-agent-rhel9:1776351169" }, { "product_name" : "multicluster engine for Kubernetes 2.1", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19099", "cpe" : "cpe:/a:redhat:multicluster_engine:2.10::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1779135478" }, { "product_name" : "multicluster engine for Kubernetes 2.11", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19108", "cpe" : "cpe:/a:redhat:multicluster_engine:2.11::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1778892370" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17459", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el8", "package" : "multicluster-engine/assisted-installer-controller-rhel8:1778507267" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17459", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el8", "package" : "multicluster-engine/assisted-installer-rhel8:1778507253" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17459", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el8", "package" : "multicluster-engine/assisted-service-8-rhel8:1778476004" }, { "product_name" : "multicluster engine for Kubernetes 2.6", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17458", "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1778476002" }, { "product_name" : "multicluster engine for Kubernetes 2.7", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11512", "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9", "package" : "multicluster-engine/assisted-installer-agent-rhel9:1777360597" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17121", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el8", "package" : "multicluster-engine/assisted-service-8-rhel8:1778288655" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17123", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/assisted-installer-agent-rhel9:1778503377" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17123", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/assisted-installer-controller-rhel9:1778503196" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17123", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/assisted-installer-rhel9:1778503297" }, { "product_name" : "multicluster engine for Kubernetes 2.8", "release_date" : "2026-05-13T00:00:00Z", "advisory" : "RHSA-2026:17123", "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1778288646" }, { "product_name" : "multicluster engine for Kubernetes 2.9", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:18584", "cpe" : "cpe:/a:redhat:multicluster_engine:2.9::el8", "package" : "multicluster-engine/assisted-service-8-rhel8:1778464111" }, { "product_name" : "multicluster engine for Kubernetes 2.9", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:18585", "cpe" : "cpe:/a:redhat:multicluster_engine:2.9::el9", "package" : "multicluster-engine/assisted-service-9-rhel9:1778464072" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.10", "release_date" : "2026-05-05T00:00:00Z", "advisory" : "RHSA-2026:13829", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.10::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1777976489" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11070", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11070", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11070", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-rhel8:1776727747" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11070", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-slim-rhel8:1776727747" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11070", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-v4-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11217", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11217", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11217", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-rhel8:1776727747" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11217", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-slim-rhel8:1776727747" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.8", "release_date" : "2026-04-27T00:00:00Z", "advisory" : "RHSA-2026:11217", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.8::el8", "package" : "advanced-cluster-security/rhacs-scanner-v4-rhel8:1777307791" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.9", "release_date" : "2026-05-05T00:00:00Z", "advisory" : "RHSA-2026:13791", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.9::el8", "package" : "advanced-cluster-security/rhacs-main-rhel8:1777986630" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.9", "release_date" : "2026-05-05T00:00:00Z", "advisory" : "RHSA-2026:13791", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.9::el8", "package" : "advanced-cluster-security/rhacs-roxctl-rhel8:1777986630" }, { "product_name" : "Red Hat Advanced Cluster Security for Kubernetes 4.9", "release_date" : "2026-05-05T00:00:00Z", "advisory" : "RHSA-2026:13791", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.9::el8", "package" : "advanced-cluster-security/rhacs-scanner-v4-rhel8:1777986630" }, { "product_name" : "Red Hat OpenShift AI 3.3", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:19712", "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9", "package" : "rhoai/odh-kube-auth-proxy-rhel9:1778696221" }, { "product_name" : "Red Hat OpenShift AI 3.3", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:19712", "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9", "package" : "rhoai/odh-model-controller-rhel9:1778578758" }, { "product_name" : "Red Hat OpenShift Container Platform 4.17", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:17598", "cpe" : "cpe:/a:redhat:openshift:4.17::el9", "package" : "openshift4/ose-telemeter-rhel9:1778711679" }, { "product_name" : "Red Hat OpenShift Container Platform 4.18", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:17448", "cpe" : "cpe:/a:redhat:openshift:4.18::el9", "package" : "openshift4/ose-telemeter-rhel9:1778152595" }, { "product_name" : "Red Hat OpenShift Container Platform 4.2", "release_date" : "2026-05-20T00:00:00Z", "advisory" : "RHSA-2026:17468", "cpe" : "cpe:/a:redhat:openshift:4.20::el9", "package" : "openshift4/ose-telemeter-rhel9:1778139790" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:17474", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-telemeter-rhel9:1778004922" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-machine-config-rhel9-operator:1779258037" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-olm-catalogd-rhel9:1779264135" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-olm-operator-controller-rhel9:1779263963" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-operator-framework-tools-rhel9:1779256521" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-operator-lifecycle-manager-rhel9:1779260263" }, { "product_name" : "Red Hat OpenShift Container Platform 4.21", "release_date" : "2026-05-26T00:00:00Z", "advisory" : "RHSA-2026:20034", "cpe" : "cpe:/a:redhat:openshift:4.21::el9", "package" : "openshift4/ose-operator-registry-rhel9:1779265022" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/cephcsi-rhel9:1778049594" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/cephcsi-rhel9-operator:1778049298" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/mcg-core-rhel9:1778049745" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/mcg-rhel9-operator:1778049753" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/ocs-client-console-rhel9:1778050558" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/ocs-client-rhel9-operator:1778049818" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1778049878" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/ocs-rhel9-operator:1778049920" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-cli-rhel9:1778049945" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-console-rhel9:1778060364" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1778050037" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1778050035" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1778050048" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-multicluster-console-rhel9:1778050508" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1778050119" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-must-gather-rhel9:1778050290" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odf-rhel9-operator:1778059723" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/odr-rhel9-operator:1778050352" }, { "product_name" : "Red Hat Openshift Data Foundation 4.17", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17550", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9", "package" : "odf4/rook-ceph-rhel9-operator:1778050482" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/cephcsi-rhel9:1778045210" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/cephcsi-rhel9-operator:1778044961" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/mcg-core-rhel9:1778045359" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/mcg-rhel9-operator:1778045374" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/ocs-client-console-rhel9:1778045891" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/ocs-client-rhel9-operator:1778045472" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1778045534" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/ocs-rhel9-operator:1778045524" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-cli-rhel9:1778045587" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-console-rhel9:1778046067" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1778045627" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1778045731" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1778045700" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-multicluster-console-rhel9:1778046234" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1778045792" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-must-gather-rhel9:1778045858" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odf-rhel9-operator:1778045945" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/odr-rhel9-operator:1778045931" }, { "product_name" : "Red Hat Openshift Data Foundation 4.18", "release_date" : "2026-05-14T00:00:00Z", "advisory" : "RHSA-2026:17547", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9", "package" : "odf4/rook-ceph-rhel9-operator:1778046079" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/cephcsi-rhel9:1776079019" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/cephcsi-rhel9-operator:1776706744" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/mcg-core-rhel9:1776707205" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/mcg-rhel9-operator:1776707231" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/ocs-client-console-rhel9:1776707760" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/ocs-client-rhel9-operator:1776707301" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1776079295" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/ocs-rhel9-operator:1776707362" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-cli-rhel9:1776707418" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1776707377" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-console-rhel9:1776707947" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1776707456" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1776707526" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1776707526" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-multicluster-console-rhel9:1776707945" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1776707569" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-must-gather-rhel9:1776707724" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odf-rhel9-operator:1776707763" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/odr-rhel9-operator:1776707771" }, { "product_name" : "Red Hat Openshift Data Foundation 4.19", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12279", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9", "package" : "odf4/rook-ceph-rhel9-operator:1776079774" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/cephcsi-rhel9:1775822432" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/cephcsi-rhel9-operator:1776403457" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/mcg-core-rhel9:1776403991" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/mcg-rhel9-operator:1776404009" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/ocs-client-console-rhel9:1776404539" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/ocs-client-rhel9-operator:1776404060" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/ocs-metrics-exporter-rhel9:1775822689" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/ocs-rhel9-operator:1776404131" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-cli-rhel9:1776406225" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1776406131" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-console-rhel9:1776406770" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-cosi-sidecar-rhel9:1776406247" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-csi-addons-rhel9-operator:1776406286" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-csi-addons-sidecar-rhel9:1776406291" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-external-snapshotter-rhel9-operator:1776406284" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-external-snapshotter-sidecar-rhel9:1776406291" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-multicluster-console-rhel9:1776406771" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-multicluster-rhel9-operator:1776406384" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-must-gather-rhel9:1776406540" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odf-rhel9-operator:1776406595" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/odr-rhel9-operator:1776406594" }, { "product_name" : "Red Hat Openshift Data Foundation 4.2", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:12277", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9", "package" : "odf4/rook-ceph-rhel9-operator:1775823207" }, { "product_name" : "Red Hat OpenShift Dev Spaces 3.27", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10175", "cpe" : "cpe:/a:redhat:openshift_devspaces:3.27::el9", "package" : "devspaces/traefik-rhel9:1776718585" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.9.3", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9385", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9", "package" : "rhosdt/tempo-gateway-rhel9:1776435643" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.9.3", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9385", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9", "package" : "rhosdt/tempo-query-rhel9:1776435613" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.9.3", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9385", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9", "package" : "rhosdt/tempo-rhel9:1776435680" }, { "product_name" : "Red Hat OpenShift distributed tracing 3.9.3", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9388", "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9", "package" : "rhosdt/opentelemetry-collector-rhel9:1776185379" }, { "product_name" : "Red Hat OpenShift Service Mesh 2.6", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11688", "cpe" : "cpe:/a:redhat:service_mesh:2.6::el8", "package" : "openshift-service-mesh/istio-cni-rhel8:1777374598" }, { "product_name" : "Red Hat OpenShift Service Mesh 2.6", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11688", "cpe" : "cpe:/a:redhat:service_mesh:2.6::el8", "package" : "openshift-service-mesh/pilot-rhel8:1777319850" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-04-16T00:00:00Z", "advisory" : "RHSA-2026:8490", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/kiali-rhel9:1776151270" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9448", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1776238635" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.1", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9448", "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1776256858" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-04-16T00:00:00Z", "advisory" : "RHSA-2026:8491", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/kiali-rhel9:1776149682" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9453", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-cni-rhel9:1776178280" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.2", "release_date" : "2026-04-21T00:00:00Z", "advisory" : "RHSA-2026:9453", "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9", "package" : "openshift-service-mesh/istio-pilot-rhel9:1776178059" }, { "product_name" : "Red Hat OpenShift Service Mesh 3.3", "release_date" : "2026-04-16T00:00:00Z", "advisory" : "RHSA-2026:8493", "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9", "package" : "openshift-service-mesh/kiali-rhel9:1776151277" }, { "product_name" : "Red Hat Quay 3.1", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11916", "cpe" : "cpe:/a:redhat:quay:3.10::el8", "package" : "quay/quay-rhel8:1776736910" }, { "product_name" : "Red Hat Quay 3.12", "release_date" : "2026-04-29T00:00:00Z", "advisory" : "RHSA-2026:11856", "cpe" : "cpe:/a:redhat:quay:3.12::el8", "package" : "quay/quay-rhel8:1776752646" }, { "product_name" : "Red Hat Quay 3.16", "release_date" : "2026-05-19T00:00:00Z", "advisory" : "RHSA-2026:19375", "cpe" : "cpe:/a:redhat:quay:3.16::el9", "package" : "quay/quay-rhel9:1779204086" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-04-30T00:00:00Z", "advisory" : "RHSA-2026:11996", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1776782369" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10125", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/client-server-rhel9:1776339099" }, { "product_name" : "Red Hat Trusted Artifact Signer 1.3", "release_date" : "2026-04-23T00:00:00Z", "advisory" : "RHSA-2026:10130", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9", "package" : "rhtas/cosign-rhel9:1776329867" } ], "package_state" : [ { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "assisted/agent-preinstall-image-builder-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-controller-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2", "fix_state" : "Affected", "package_name" : "rhai/assisted-installer-rhel9", "cpe" : "cpe:/a:redhat:assisted_installer:2" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/cert-manager-istio-csr-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/cert-manager-operator-bundle", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/cert-manager-operator-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/jetstack-cert-manager-acmesolver-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "cert-manager Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "cert-manager/jetstack-cert-manager-rhel9", "cpe" : "cpe:/a:redhat:cert_manager:1" }, { "product_name" : "Confidential Compute Attestation", "fix_state" : "Affected", "package_name" : "openshift-sandboxed-containers/osc-must-gather-rhel9", "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1" }, { "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" }, { "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" }, { "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" }, { "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-operator/bitwarden-sdk-server-rhel9", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-operator/external-secrets-operator-bundle", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-operator/external-secrets-operator-rhel9", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "External Secrets Operator for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "external-secrets-operator/external-secrets-rhel9", "cpe" : "cpe:/a:redhat:external_secrets_operator:1" }, { "product_name" : "Kernel Module Management Operator for Red Hat Openshift", "fix_state" : "Affected", "package_name" : "kmm/kernel-module-management-must-gather-rhel9", "cpe" : "cpe:/a:redhat:kernel_module_management:2" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/cluster-logging-rhel9-operator", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/logging-loki-rhel9", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/loki-operator-bundle", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/loki-rhel9-operator", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/lokistack-gateway-rhel9", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/opa-openshift-rhel9", "cpe" : "cpe:/a:redhat:logging:5" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/cluster-logging-rhel9-operator", "cpe" : "cpe:/a:redhat:logging:6" }, { "product_name" : "Logging Subsystem for Red Hat OpenShift", "fix_state" : "Affected", "package_name" : "openshift-logging/lokistack-gateway-rhel9", "cpe" : "cpe:/a:redhat:logging:6" }, { "product_name" : "Logical Volume Manager Storage", "fix_state" : "Not affected", "package_name" : "lvms4/lvms-must-gather-rhel9", "cpe" : "cpe:/a:redhat:lvms:4" }, { "product_name" : "Migration Toolkit for Containers", "fix_state" : "Affected", "package_name" : "rhmtc/openshift-migration-controller-rhel8", "cpe" : "cpe:/a:redhat:rhmt:1" }, { "product_name" : "Migration Toolkit for Containers", "fix_state" : "Affected", "package_name" : "rhmtc/openshift-migration-log-reader-rhel8", "cpe" : "cpe:/a:redhat:rhmt:1" }, { "product_name" : "Migration Toolkit for Containers", "fix_state" : "Affected", "package_name" : "rhmtc/openshift-migration-must-gather-rhel8", "cpe" : "cpe:/a:redhat:rhmt:1" }, { "product_name" : "Migration Toolkit for Virtualization", "fix_state" : "Affected", "package_name" : "migration-toolkit-virtualization/mtv-must-gather-rhel8", "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2" }, { "product_name" : "Migration Toolkit for Virtualization", "fix_state" : "Will not fix", "package_name" : "mtv-candidate/mtv-must-gather-rhel8", "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/assisted-installer-agent-rhel8", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Will not fix", "package_name" : "multicluster-engine/cluster-api-provider-aws-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Under investigation", "package_name" : "multicluster-engine/hive-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/hypershift-rhel9-operator", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/image-based-install-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/kube-rbac-proxy-mce-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Engine for Kubernetes", "fix_state" : "Affected", "package_name" : "multicluster-engine/must-gather-rhel9", "cpe" : "cpe:/a:redhat:multicluster_engine" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-grafana-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Multicluster Global Hub", "fix_state" : "Affected", "package_name" : "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9", "cpe" : "cpe:/a:redhat:multicluster_globalhub" }, { "product_name" : "Network Observability Operator", "fix_state" : "Not affected", "package_name" : "network-observability/network-observability-cli-rhel9", "cpe" : "cpe:/a:redhat:network_observ_optr:1" }, { "product_name" : "Node HealthCheck Operator", "fix_state" : "Affected", "package_name" : "workload-availability/node-healthcheck-must-gather-rhel9", "cpe" : "cpe:/a:redhat:workload_availability_nhc:0" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Affected", "package_name" : "oadp/oadp-mustgather-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift API for Data Protection", "fix_state" : "Affected", "package_name" : "oadp/oadp-velero-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "ocp-tools-4/jenkins-agent-base-rhel9", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "ocp-tools-4/jenkins-rhel8", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "ocp-tools-4/jenkins-rhel9", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Developer Tools and Services", "fix_state" : "Affected", "package_name" : "openshift4/ose-jenkins", "cpe" : "cpe:/a:redhat:ocp_tools" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Not affected", "package_name" : "openshift-lightspeed/openshift-mcp-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines-client", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-cache-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-chains-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-cli-tkn-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-opc-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-results-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-results-watcher-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Pipelines", "fix_state" : "Affected", "package_name" : "openshift-pipelines/pipelines-sidecarlogresults-rhel9", "cpe" : "cpe:/a:redhat:openshift_pipelines:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-ekb-dispatcher-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-ekb-kafka-controller-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-ekb-receiver-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-channel-controller-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-controller-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-filter-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-ingress-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-jobsink-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-mtping-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-eventing-webhook-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/kn-plugin-event-sender-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Serverless", "fix_state" : "Affected", "package_name" : "openshift-serverless-1/serverless-must-gather-rhel9", "cpe" : "cpe:/a:redhat:serverless:1" }, { "product_name" : "OpenShift Service Mesh 2", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/istio-must-gather-rhel9", "cpe" : "cpe:/a:redhat:service_mesh:2" }, { "product_name" : "OpenShift Service Mesh 2", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/proxyv2-rhel9", "cpe" : "cpe:/a:redhat:service_mesh:2" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/istio-must-gather-rhel9", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Not affected", "package_name" : "openshift-service-mesh/istio-proxyv2-rhel9", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Will not fix", "package_name" : "openshift-service-mesh/kiali-operator-bundle", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "OpenShift Service Mesh 3", "fix_state" : "Will not fix", "package_name" : "openshift-service-mesh/kiali-rhel9-operator", "cpe" : "cpe:/a:redhat:service_mesh:3" }, { "product_name" : "Power monitoring for Red Hat OpenShift", "fix_state" : "Not affected", "package_name" : "openshift-power-monitoring/power-monitoring-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift_power_monitoring" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-grafana-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/acm-multicluster-observability-addon-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/acm-must-gather-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/kube-rbac-proxy-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/kube-state-metrics-rhel9", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Not affected", "package_name" : "rhacm2/submariner-operator-bundle", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2", "fix_state" : "Affected", "package_name" : "rhacm2/submariner-rhel9-operator", "cpe" : "cpe:/a:redhat:acm:2" }, { "product_name" : "Red Hat Advanced Cluster Security 4", "fix_state" : "Not affected", "package_name" : "advanced-cluster-security/rhacs-rhel8-operator", "cpe" : "cpe:/a:redhat:advanced_cluster_security:4" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "ansible-automation-platform-25/aap-must-gather-rhel8", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-26/aap-must-gather-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Affected", "package_name" : "ansible-on-clouds/aoc-azure-aap-installer-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Build of Kueue", "fix_state" : "Not affected", "package_name" : "kueue/kueue-must-gather-rhel9", "cpe" : "cpe:/a:redhat:kueue_operator:1" }, { "product_name" : "Red Hat Build of Podman Desktop", "fix_state" : "Affected", "package_name" : "podman-desktop-macos-1-0", "cpe" : "cpe:/a:redhat:podman_desktop:1" }, { "product_name" : "Red Hat Build of Podman Desktop", "fix_state" : "Affected", "package_name" : "podman-desktop-windows-1-0", "cpe" : "cpe:/a:redhat:podman_desktop:1" }, { "product_name" : "Red Hat Build of Podman Desktop - Tech Preview", "fix_state" : "Will not fix", "package_name" : "rhdesktop/rh-podman-desktop-ext-bootc-rhel10", "cpe" : "cpe:/a:redhat:podman_desktop:0" }, { "product_name" : "Red Hat Build of Podman Desktop - Tech Preview", "fix_state" : "Will not fix", "package_name" : "rhdesktop/rh-podman-desktop-ext-rhel-rhel10", "cpe" : "cpe:/a:redhat:podman_desktop:0" }, { "product_name" : "Red Hat Connectivity Link 1", "fix_state" : "Affected", "package_name" : "rhcl-1/authorino-rhel9", "cpe" : "cpe:/a:redhat:connectivity_link:1" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Not affected", "package_name" : "grafana", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "rhel10/bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "rhel10-eus/rhel-10.0-bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 10", "fix_state" : "Affected", "package_name" : "skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:10" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "container-tools:rhel8/buildah", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "container-tools:rhel8/podman", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "container-tools:rhel8/skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Not affected", "package_name" : "grafana", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "ignition", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "osbuild-composer", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "rhel9/bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "rhel9-eus/rhel-9.6-bootc-image-builder", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat Enterprise Linux 9", "fix_state" : "Affected", "package_name" : "skopeo", "cpe" : "cpe:/o:redhat:enterprise_linux:9" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-maas-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-driver-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-launcher-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-mod-arch-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-model-registry-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/rhai-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift Cluster Manager CLI", "fix_state" : "Affected", "package_name" : "ocm-cli-clients/ocm-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_cluster_manager_cli:1" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "cri-o", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "lvms4/lvms-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/cnf-tests-rhel8", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/cnf-tests-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/kube-compare-artifacts-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/lifecycle-agent-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/network-tools-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/numaresources-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/oc-mirror-plugin-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-agent-installer-api-server-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-agent-installer-csr-approver-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-agent-installer-node-agent-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-agent-installer-orchestrator-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-aws-cluster-api-controllers-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-aws-pod-identity-webhook-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-azure-workload-identity-webhook-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-baremetal-installer-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-cli-artifacts-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-cloud-credential-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-csi-driver-shared-resource-mustgather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-deployer-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-docker-builder", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-docker-builder-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-helm-rhel9-operator", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-hypershift-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-installer-artifacts-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-installer-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-kube-state-metrics-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-local-storage-mustgather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-machine-os-images-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-oauth-server-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-ovn-kubernetes-microshift-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-ovn-kubernetes-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-secrets-store-csi-mustgather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ose-tests-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift4/ose-tools-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "openshift4/ptp-must-gather-rhel9", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift-clients", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "openshift-kni/commatrix", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "podman", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Not affected", "package_name" : "redhat/redhat-operator-index", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat OpenShift Container Platform 4", "fix_state" : "Affected", "package_name" : "skopeo", "cpe" : "cpe:/a:redhat:openshift:4" }, { "product_name" : "Red Hat Openshift Data Foundation 4", "fix_state" : "Affected", "package_name" : "odf4/mcg-cli-rhel9", "cpe" : "cpe:/a:redhat:openshift_data_foundation:4" }, { "product_name" : "Red Hat OpenShift Dev Spaces", "fix_state" : "Affected", "package_name" : "devspaces/udi-base-rhel10", "cpe" : "cpe:/a:redhat:openshift_devspaces:3" }, { "product_name" : "Red Hat OpenShift for Windows Containers", "fix_state" : "Not affected", "package_name" : "openshift4-wincw/windows-machine-config-operator-bundle", "cpe" : "cpe:/a:redhat:windows_machine_config" }, { "product_name" : "Red Hat OpenShift for Windows Containers", "fix_state" : "Not affected", "package_name" : "openshift4-wincw/windows-machine-config-rhel9-operator", "cpe" : "cpe:/a:redhat:windows_machine_config" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Will not fix", "package_name" : "openshift-gitops-1/argocd-agent-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Will not fix", "package_name" : "openshift-gitops-1/argocd-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Will not fix", "package_name" : "openshift-gitops-1/argocd-rhel9", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Affected", "package_name" : "openshift-gitops-1/dex-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift GitOps", "fix_state" : "Will not fix", "package_name" : "openshift-gitops-1/must-gather-rhel8", "cpe" : "cpe:/a:redhat:openshift_gitops:1" }, { "product_name" : "Red Hat OpenShift on AWS", "fix_state" : "Affected", "package_name" : "rosa", "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-apiserver-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-cloner-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-controller-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-importer-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-operator-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Not affected", "package_name" : "container-native-virtualization/virt-cdi-uploadproxy-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenShift Virtualization 4", "fix_state" : "Affected", "package_name" : "container-native-virtualization/virt-cdi-uploadserver-rhel9", "cpe" : "cpe:/a:redhat:container_native_virtualization:4" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Not affected", "package_name" : "rhoso-operators/openstack-operator-bundle", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Not affected", "package_name" : "rhoso-operators/openstack-rhel9-operator", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat OpenStack Platform 18.0", "fix_state" : "Affected", "package_name" : "rhoso-operators/prometheus-podman-exporter-rhel9", "cpe" : "cpe:/a:redhat:openstack:18.0" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Will not fix", "package_name" : "quay/clair-rhel8", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Not affected", "package_name" : "quay/clair-rhel9", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-builder-rhel8", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-builder-rhel9", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Not affected", "package_name" : "rhtas/certificate-transparency-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/ec-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/fetch-tsa-certs-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/fulcio-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/gitsign-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/policy-controller-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/policy-controller-rhel9-operator", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rekor-backfill-redis-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rekor-cli-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rekor-monitor-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rekor-server-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/rhtas-console-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/timestamp-authority-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/trillian-database-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/trillian-logserver-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/trillian-logsigner-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Red Hat Trusted Artifact Signer", "fix_state" : "Affected", "package_name" : "rhtas/updatetree-rhel9", "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1" }, { "product_name" : "Security Profiles Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-security-profiles-operator-bundle", "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1" }, { "product_name" : "Security Profiles Operator", "fix_state" : "Affected", "package_name" : "compliance/openshift-security-profiles-rhel8-operator", "cpe" : "cpe:/a:redhat:openshift_security_profiles_operator:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:1" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Affected", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" }, { "product_name" : "Zero Trust Workload Identity Manager - Tech Preview", "fix_state" : "Will not fix", "package_name" : "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9", "cpe" : "cpe:/a:redhat:zero_trust_workload_identity_manager:0" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-34986\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34986\nhttps://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\nhttps://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants" ], "name" : "CVE-2026-34986", "mitigation" : { "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "lang" : "en:us" }, "csaw" : false }