Skip to content
Heist/ feed
High

Linux-pam: linux-pam directory traversal

Type: advisorySource: Official CVE List1 source record

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Announced Group revision 1
Original source ↗

CVE-2025-6020

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-6020

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10.0 Extended Update Support

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 7 Extended Lifecycle Support

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.2 Advanced Update Support

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.4 Extended Update Support

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Web Terminal 1.11 on RHEL 9

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Web Terminal 1.11 on RHEL 9

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Web Terminal 1.12 on RHEL 9

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/29/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/30/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/31/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/32/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/33/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/34/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/35/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/36/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/37/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/38/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/39/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/40/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/41/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHOSS-1.36-RHEL-8

Source reference: /containers/cna/affected/42/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

cert-manager operator for Red Hat OpenShift 1.16

Source reference: /containers/cna/affected/43/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Compliance Operator 1

Source reference: /containers/cna/affected/44/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/45/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/46/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Insights proxy 1.5

Source reference: /containers/cna/affected/47/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/48/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/49/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/50/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/51/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/52/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/53/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/54/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/55/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift distributed tracing 3.6.0

Source reference: /containers/cna/affected/56/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift sandboxed containers 1.10

Source reference: /containers/cna/affected/57/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift sandboxed containers 1.10

Source reference: /containers/cna/affected/58/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift sandboxed containers 1.10

Source reference: /containers/cna/affected/59/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift sandboxed containers 1.10

Source reference: /containers/cna/affected/60/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.7.1",
        "versionType": "semver"
      }
    ],
    "packageName": "linux-pam",
    "collectionURL": "https://github.com/linux-pam/linux-pam",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.6.1-8.el10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.6.1-8.el10_0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.1.8-23.el7_9.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-37.el8_10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-38.el8_10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-8.el8_2.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-14.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-26.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.3.1-26.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-26.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-25.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-26.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-25.el9_6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream",
      "cpe:/o:redhat:rhel_e4s:9.0::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-9.el9_0.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream",
      "cpe:/o:redhat:rhel_e4s:9.2::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-15.el9_2.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream",
      "cpe:/o:redhat:rhel_eus:9.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.5.1-24.el9_4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "pam",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.11-19",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "web-terminal/web-terminal-rhel9-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.11-8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:webterminal:1.12::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.12 on RHEL 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.12-4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752066672",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752065732",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-businesscentral-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752065732",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-controller-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-3.1752065737",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752065731",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-kieserver-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-25",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752065736",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-process-migration-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-2.1752065733",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-rhel8-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1752065755",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-smartrouter-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-management-console-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-12",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-18",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-rhel8-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.36.0-7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "cert-manager operator for Red Hat OpenShift 1.16",
    "versions": [
      {
        "status": "unaffected",
        "version": "v1.16.5-1760515757",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_compliance_operator:1::el9"
    ],
    "vendor": "Red Hat",
    "product": "Compliance Operator 1",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.8.0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "compliance/openshift-compliance-openscap-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "versions": [
      {
        "status": "unaffected",
        "version": "2.0.0-1752592913",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "discovery/discovery-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "versions": [
      {
        "status": "unaffected",
        "version": "2.2.1-1758555934",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "discovery/discovery-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.5.7-1759331989",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752046452",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/opentelemetry-collector-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752046437",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/opentelemetry-rhel8-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752046439",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/opentelemetry-target-allocator-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752070865",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-gateway-opa-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752070873",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-gateway-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1751993590",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-jaeger-query-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752070827",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-query-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752070833",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "versions": [
      {
        "status": "unaffected",
        "version": "rhosdt-3.6-1752070866",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhosdt/tempo-rhel8-operator",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.10",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.10.2-1757422110",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.10",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.10.2-1757421804",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.10",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.10.2-1757421879",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.10",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.10.2-1757422401",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-6020

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#17102 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement